Bug#1021331: cclive: reproducible-builds: build path embedded in /usr/bin/cclive

[Vagrant Cascadian]

Source: cclive
Severity: normal
Tags: patch
User: reproducible-builds at lists.alioth.debian.org
Usertags: buildpath
X-Debbugs-Cc: reproducible-bugs at lists.alioth.debian.org

The build path is embedded in /usr/bin/cclive:

  https://tests.reproducible-builds.org/debian/rb-pkg/unstable/amd64/diffoscope-results/cclive.html

  g++,·-g·-O2·-ffile-prefix-map=/build/1st/cclive-0.9.3=.·-fstack-protector-strong ...
  vs.
  g++,·-g·-O2·-ffile-prefix-map=/build/2/cclive-0.9.3/2nd=.·-fstack-protector-strong ...

The attached proof-of-concept patch to src/cc/options.h fixes this by
not embedding CXXFLAGS in the resulting binaries.

A better fix would be to adjust the included CXXFLAGS and replace the
build path with a placeholder string (e.g. BUILDPATH), but maybe someone
who knows cclive specifically would have a better idea where would be
best to do that.

According to my local tests, with this patch applied, cclive should build
reproducibly on tests.reproducible-builds.org!

Thanks for maintaining cclive!

live well,
  vagrant
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-src-cc-options.h-Avoid-recording-the-build-flags.patch
Type: text/x-diff
Size: 987 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/reproducible-bugs/attachments/20221005/ac23cb99/attachment.patch>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 227 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/reproducible-bugs/attachments/20221005/ac23cb99/attachment.sig>