Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Please fix the reproducibility of 0.20.0 #3545

Closed
Giszmo opened this issue Apr 16, 2021 · 1 comment
Closed

Please fix the reproducibility of 0.20.0 #3545

Giszmo opened this issue Apr 16, 2021 · 1 comment
Assignees
Labels
bug Something isn't working

Comments

@Giszmo
Copy link

Giszmo commented Apr 16, 2021

It's a tiny detail but by the strict rules it's still a diff that makes the app "not reproducible". Apparently you changed the support email address between building the release and tagging the version. You will find the full review in some minutes here.


The content of the linked page:

Here is the output using our test script on the binary from Google Play:

Results:
appId:          io.horizontalsystems.bankwallet
signer:         c1899493e440489178b8748851b72cbed50c282aaa8c03ae236a4652f8c4f27b
apkVersionName: 0.20.0
apkVersionCode: 41
apkHash:        1a98f8bec96d1e50b6aa6fe2cb9116b16ec1b48f71241c9081ac67dadc7166d9

Diff:
Files /tmp/fromPlay_io.horizontalsystems.bankwallet_41/apktool.yml and /tmp/fromBuild_io.horizontalsystems.bankwallet_41/apktool.yml differ
Only in /tmp/fromPlay_io.horizontalsystems.bankwallet_41/original/META-INF: MANIFEST.MF
Only in /tmp/fromPlay_io.horizontalsystems.bankwallet_41/original/META-INF: RELEASEK.RSA
Only in /tmp/fromPlay_io.horizontalsystems.bankwallet_41/original/META-INF: RELEASEK.SF
Files /tmp/fromPlay_io.horizontalsystems.bankwallet_41/smali_classes2/io/horizontalsystems/bankwallet/core/providers/AppConfigProvider.smali and /tmp/fromBuild_io.horizontalsystems.bankwallet_41/smali_classes2/io/horizontalsystems/bankwallet/core/providers/AppConfigProvider.smali differ

Unfortunately that is one file too many. Upon closer inspection it looks totally benign though:

$ diff /tmp/from{Play,Build}_io.horizontalsystems.bankwallet_41/smali_classes2/io/horizontalsystems/bankwallet/core/providers/AppConfigProvider.smali
205c205
<     const-string v0, "unstoppable.support@protonmail.com"
---
>     const-string v0, "support.unstoppable@protonmail.com"

so while we do not ring the alarm over this, we unfortunately have to give it the verdict not verifiable until they produce a revision with the right email address.

Thank you to Horizontal Systems for repeat donations:

@abdrasulov abdrasulov added this to To do in Version 0.20 via automation Apr 19, 2021
@abdrasulov abdrasulov added the bug Something isn't working label Apr 19, 2021
@rafaelekol rafaelekol moved this from To do to Waiting For Testing in Version 0.20 Apr 19, 2021
Version 0.20 automation moved this from Waiting For Testing to Accepted Apr 19, 2021
@Dianaaiym
Copy link
Member

Hi Leo,

We have released a build with updated mail. Please review our build in the market.

Best Regards,
HS Team

It's a tiny detail but by the strict rules it's still a diff that makes the app "not reproducible". Apparently you changed the support email address between building the release and tagging the version. You will find the full review in some minutes here.


The content of the linked page:

Here is the output using our test script on the binary from Google Play:


Results:

appId:          io.horizontalsystems.bankwallet

signer:         c1899493e440489178b8748851b72cbed50c282aaa8c03ae236a4652f8c4f27b

apkVersionName: 0.20.0

apkVersionCode: 41

apkHash:        1a98f8bec96d1e50b6aa6fe2cb9116b16ec1b48f71241c9081ac67dadc7166d9



Diff:

Files /tmp/fromPlay_io.horizontalsystems.bankwallet_41/apktool.yml and /tmp/fromBuild_io.horizontalsystems.bankwallet_41/apktool.yml differ

Only in /tmp/fromPlay_io.horizontalsystems.bankwallet_41/original/META-INF: MANIFEST.MF

Only in /tmp/fromPlay_io.horizontalsystems.bankwallet_41/original/META-INF: RELEASEK.RSA

Only in /tmp/fromPlay_io.horizontalsystems.bankwallet_41/original/META-INF: RELEASEK.SF

Files /tmp/fromPlay_io.horizontalsystems.bankwallet_41/smali_classes2/io/horizontalsystems/bankwallet/core/providers/AppConfigProvider.smali and /tmp/fromBuild_io.horizontalsystems.bankwallet_41/smali_classes2/io/horizontalsystems/bankwallet/core/providers/AppConfigProvider.smali differ

Unfortunately that is one file too many. Upon closer inspection it looks totally benign though:


$ diff /tmp/from{Play,Build}_io.horizontalsystems.bankwallet_41/smali_classes2/io/horizontalsystems/bankwallet/core/providers/AppConfigProvider.smali

205c205

<     const-string v0, "unstoppable.support@protonmail.com"

---

>     const-string v0, "support.unstoppable@protonmail.com"

so while we do not ring the alarm over this, we unfortunately have to give it the verdict not verifiable until they produce a revision with the right email address.

Thank you to Horizontal Systems for repeat donations:

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working
Projects
No open projects
Development

No branches or pull requests

4 participants