[vlc-devel] Complete, Corresponding Source (CCS) for a VLC binary release

[Jean-Baptiste Kempf]

Hello,

On Tue, 30 Jan 2018, at 11:12, lasse.kantola at iki.fi wrote:
> Detailed list of issues:

It seems all were correctly mirrored on our servers, then.

> - Packages without SHA512SUMS
>   - bghudappkit: OK, because uses Git clone with a pinned version.
>   - ffmpeg: OK, because uses versioned Git snapshot.


>   - mfx: BAD, because uses Git clone, but version is not specified.
>   - postproc: looks BAD, but OK in practice.
>     - BAD, because uses Git snapshot without version information.
>     - OK, because no version changes in Git after 2012, and the Git 
> snapshot is bit-exact to 
> http://ftp.videolan.org/pub/contrib/postproc-git.tar.gz
>   - tremor: BAD, because uses SVN export without version information.
>     - However, there are only 4 changes to Tremor SVN since 2013, so 
> deducing the version should not be too difficult.
>   - x264: BAD, because uses Git snapshot without version information 
> ftp://ftp.videolan.org/pub/videolan/x264/snapshots/last_stable_x264.tar.bz2

So, only those 4 libraries are an actual issue, right?

-- 
Jean-Baptiste Kempf -  President
+33 672 704 734