splint package does not build reproducibly

[bmwiedemann]

SPLINT_VERSION includes output of date so that building on different days gives different output binaries.
See https://reproducible-builds.org/ for why this matters and
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=797254
for a possible patch (needs to be ported from configure to configure.ac)

One simple alternative would be to not include the build date into SPLINT_VERSION at all.

[bpringlemeir]

Do you still maintain the package? I considered replacing the date with a git tag. However, I see that we have LCL_COMPILE which is defined as "Compiled using $CC $CFLAGS on uname -a by whoami". We removed the autoconf stuff from git so this will be generated and who ever runs the autoconf will change this string.

[bmwiedemann]

We still have the package:
https://build.opensuse.org/package/show/openSUSE:Factory/splint solves those with splint-3.1.2-no-uname.patch and splint-3.1.2-build-date-override.patch so for us it builds reproducibly atm, but I always try to contribute such patches upstream so that other distributions benefit as well.