Bug#1118385: texlive-binaries: corner-case PDF image nondeterminism

Preuße, Hilmar <[email protected]> Tue, 12 May 2026 23:38:30 +0200
Newsgroups gmane.linux.debian.devel.tetex
Message-ID <74c8f243-18df-4810-946e-a975c3d4ff29__48038.5691671231$1778622087$gmane$org@web.de>
Am 12.05.2026 um 04:37 schrieb Aaron M. Ucko:

Hello,

> As I recall, my pre-filing investigation found that libpng leaves any
> trailing portion of the row's final byte unspecified.  It would of
> course be possible to tighten that policy up, but there's normally no
> need to, even from a reproducibility perspective, because such bits are
> typically of no interest to consumers anyway.
> 

As far as I understood there are some (random) bytes inserted, which 
remain invisible to the consumer but are nevertheless there and make the 
file building not fully reproducible, correct? For the consumers of 
course there is no need, but there is some kind of need to make file 
creation deterministic.
This could be communicated to the piece of code generating the 
randomness. If I understand correctly it has to be found out, where that 
code is located. If you are sure, it is libpng, we should at least clone 
that bug to evaluation.

H.
-- 
sigfault
OpenPGP_signature.asc (application/pgp-signature, 840 B)
-----BEGIN PGP SIGNATURE-----
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=vPzp
-----END PGP SIGNATURE-----