Bug#1118385: Non-reproducibility in pdfTeX

Preuße, Hilmar <[email protected]> Mon, 18 May 2026 23:04:30 +0200
Newsgroups gmane.linux.debian.devel.tetex
Message-ID <bf986fa1-8b38-4b6e-9755-3a5a507da1e5__8265.06797909445$1779138445$gmane$org@web.de>
Am 18.05.2026 um 09:43 schrieb Norbert Preining:

Hello Norbert,

> again me ...
> 

Glad to see your are still engaged.

>> I am not able to reproduce it with pdflatex. When I set
>> SOURCE_DATE_EPOCH and FORCE_SOURCE_DATE I always get bit-perfect PDFs,
>> even when valuators.png is included.
> 
> I can now reproduce it. You need to the glibc to write random into the
> allocated buffers:
> 

[ Much stuff regarding Memory allocation deleted ]


> The actual diff might be different, due to the random noise generated.
> 

Many thanks for engagement and more insight into the story. Great idea 
to use that MALLOC_PERTURB_ to generate random heap content to trigger 
the issue. I'm now really able to reproduce the issue and can confirm 
that your proposed patch at least solves this specific issue.

> I have now posed this question on the pnggroup github discussion page:
> https://github.com/pnggroup/libpng/discussions/864
> 

Many thanks for that! I've subscribed to that discussion and will follow it.

Hilmar
OpenPGP_signature.asc (application/pgp-signature, 840 B)
-----BEGIN PGP SIGNATURE-----
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=nodu
-----END PGP SIGNATURE-----