Dear Maintainer,

Using diffoscope to compare two files (tar.gz) diffoscope crashes with the
stacktrace below.

The files in question are assets/private.mp3 from two builds of Electrum APK,
which are tar-gzipped file trees containing python code.

Testing out older versions of diffoscope reveals that the problem starts from
diffoscope-187

Hi Sander,

Thanks for the report. Given that you mention .tar.gz & .mp3 files,
and that diffoscope is crashing within code for comparing Python .pyc
files (!), I suspect what is happening is that diffoscope is not
detecting the filetype correctly. (Still, diffoscope shouldn't be
crashing when encountering an "invalid" .pyc file. In other words,
there is at least one problem here.)

Please could you provide:

  a) The two .tar.gz files in question

and:

  b) The result of running diffoscope and appending "--debug 2>debug.log"
     and attaching the resulting debug.log.

With that, I'm sure I can quite easily diagnose and fix both potential
issues for you.


Regards,

----- Original message -----
From: Sander van Grieken <sander@outrightsolutions.nl>
To: Chris Lamb <lamby@debian.org>
Subject: Re: Bug#1012258: diffoscope crashes with IndexError: tuple index out of range
Date: Thursday, 2 June 2022 12:52 PM

debug.log attached. The two archives are provided here:
http://www.outrightsolutions.nl/~sander/debian/private.mp3
_http://www.outrightsolutions.nl/~sander/debian/private_2_.mp3_

Regards,

Sander

Hello,

Bug #1012258 in diffoscope reported by you has been fixed in the
Git repository and is awaiting an upload. You can see the commit
message below and you can check the diff of the fix at:

https://salsa.debian.org/reproducible-builds/diffoscope/-/commit/35a9bfbee0c1a5f00fb0a66b689514d21bacd6a5

(this message was generated automatically)
-- 
Greetings

https://bugs.debian.org/1012258

(Don't forget to keep all recipients in the To/CC when replying; thanks...)

Cheers for these. I've pushed a fix and I'll release it tomorrow in
diffoscope version 215.

Out of interest, how come you name these .tgz files .mp3?


Regards,

We believe that the bug you reported is fixed in the latest version of
diffoscope, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 1012258@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Chris Lamb <lamby@debian.org> (supplier of updated diffoscope package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)
Format: 1.8
Date: Fri, 03 Jun 2022 06:54:48 +0100
Source: diffoscope
Built-For-Profiles: nocheck
Architecture: source
Version: 215
Distribution: unstable
Urgency: medium
Maintainer: Reproducible builds folks <reproducible-builds@lists.alioth.debian.org>
Changed-By: Chris Lamb <lamby@debian.org>
Closes: 1011635 1012258
Changes:
 diffoscope (215) unstable; urgency=medium
 .
   [ Chris Lamb ]
   * Bug fixes:
     - Also catch IndexError (in addition to ValueError) when parsing .pyc
       files. (Closes: #1012258)
     - Strip "sticky" etc. from "x.deb: sticky Debian binary package […]".
       Thanks to David Prévot for the report. (Closes: #1011635)
     - Correctly package diffoscope's scripts/ directory, fixing the extraction
       of vmlinuz kernel images. (Closes: reproducible-builds/diffoscope#305)
     - Correct the logic for supporting different versions of argcomplete in
       debian/rules.
 .
   * New features:
     - Support both PyPDF 1.x and 2.x.
 .
   * Codebase improvements:
     - Don't call re.compile and then call .sub on the result; just call
       re.sub directly.
     - Clarify the logic around the difference between --usage and --help.
 .
   * Testsuite improvements:
     - Integrate test coverage with GitLab's concept of artifacts.
     - Re-enable Gnumeric tests as its now available again.
     - Test --help and --usage, and additionally test that --help includes
       the programmatically-generated file format list as well.
 .
   [ Holger Levsen ]
   * Bump Standards Version field in debian/control to 4.6.1.
Checksums-Sha1:
 3952f5b86fb57c88f1f7dbb0a7641b213cede492 4966 diffoscope_215.dsc
 bb1fc71692d804d673bb46edf1f23266317eb584 2097172 diffoscope_215.tar.xz
 dfc79e2ba8651808b1b20c4933a602458d857503 7119 diffoscope_215_amd64.buildinfo
Checksums-Sha256:
 60ecf0d5e95e3b69651e0881ab373c332b7f7fb942ad467adc30ea6afba79f2c 4966 diffoscope_215.dsc
 fa920480e97118e53b39cee0ced2dfec219528334eacd5d50fa9f081162ad483 2097172 diffoscope_215.tar.xz
 87a4d2e842e85fa5a29ba6910fa9634ed99a13b1bc5135f3b0d76871f35d43b6 7119 diffoscope_215_amd64.buildinfo
Files:
 934c25b7fafa4ac8de03f5e12dc55099 4966 devel optional diffoscope_215.dsc
 de5f4e9d5d06897a2516a8d0fc46f019 2097172 devel optional diffoscope_215.tar.xz
 d219047424e8b161a1a777aee7f4d750 7119 devel optional diffoscope_215_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----
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=oJ4F
-----END PGP SIGNATURE-----