[rb-general] Reproducible Android apps: resources.arsc

[Chris Lamb]

Hi Torsten,

> AFAIK diffoscope uses apktool to show more differences in APK files. The
> zip differences are shown via zipinfo, so I am not sure there's more
> diffoscope could do.

diffoscope could, hypothethically, use an additional tool. Perhaps a
lower-level one..depends on the actual difference. Hence..

> > Could you perhaps provide two .apk files in question, ideally in a
> > wishlist bug against diffoscope?
> 
> I could do that. Do you want me to go ahead with this regardless […]

... please do so. :)

> Anyway, I agree the issue would need to be solved in Android upstream.
> That is why I opened a ticket with them that I had linked in my previous
> mail and which includes a bit more details.

Thanks for filing the issue. As it happens, I tend to avoid filing
"your program is not reproducible" bugs without a more concrete idea of
the problem simply from a "political" point of view, but YMMV. :)

Working out at least *which* tool is generating this non-determinism
would be the first step I think and/or working out exactly how the
files differ (using an possibly-improved diffoscope for transparency).


Regards,

-- 
      ,''`.
     : :'  :     Chris Lamb
     `. `'`      lamby at debian.org / chris-lamb.co.uk
       `-