Uploaded image for project: 'JDK'
  1. JDK
  2. JDK-8243666

ModuleHashes attribute generated for JMOD and JAR files depends on timestamps

    Details

    • Type: Bug
    • Status: Closed
    • Priority: P3
    • Resolution: Fixed
    • Affects Version/s: 15
    • Fix Version/s: 15
    • Component/s: core-libs
    • Labels:

      Description

      One of the reasons that JDK builds are not reproducible is that the hashes generated for modules packaged as JMOD files are computed from the entire file content, including timestamps and other meta data for entries in the JMOD. This should be re-examined as a hash based on the names and content of each entry should be sufficient.

        Attachments

          Issue Links

            Activity

              People

              • Assignee:
                alanb Alan Bateman
                Reporter:
                alanb Alan Bateman
              • Votes:
                0 Vote for this issue
                Watchers:
                3 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved: