[New-bugs-announce] [issue31312] Build differences caused by the time stamps

[Wayland Zhong]

New submission from Wayland Zhong:

When I build python (version 2.7.13), I find the build results are different every time. It seems to be caused by some times tamps, and they may be generated by the code below:
    Lib/py_compile.py:106: with open(file, 'U') as f:
    Lib/py_compile.py:107:     try:
    Lib/py_compile.py:108:        timestamp = long(os.fstat(f.fileno()).st_mtime)
    Lib/py_compile.py:109:    except AttributeError:
    Lib/py_compile.py:110:        timestamp = long(os.stat(file).st_mtime)
    Lib/py_compile.py:111:   codestring = f.read()

As we know, reproducible build is a good way to counter malicious attacks that generate malicious executables, by making it easy to recreate the executable to determine if the result is correct. How can I eliminate the differences caused by the time stamps? Just remove some code? Or is there any configuration?
If we can't eliminate the difference now, can lsof support it in future versions?
Thank you.

----------
components: Library (Lib)
messages: 301042
nosy: WaylandZ
priority: normal
severity: normal
status: open
title: Build differences caused by the time stamps
type: security
versions: Python 2.7

_______________________________________
Python tracker <report at bugs.python.org>
<http://bugs.python.org/issue31312>
_______________________________________