Uploaded image for project: 'JDK'
  1. JDK
  2. JDK-8243666

ModuleHashes attribute generated for JMOD and JAR files depends on timestamps

XMLWordPrintable

        One of the reasons that JDK builds are not reproducible is that the hashes generated for modules packaged as JMOD files are computed from the entire file content, including timestamps and other meta data for entries in the JMOD. This should be re-examined as a hash based on the names and content of each entry should be sufficient.

              alanb Alan Bateman
              alanb Alan Bateman
              Votes:
              0 Vote for this issue
              Watchers:
              5 Start watching this issue

                Created:
                Updated:
                Resolved: