[vlc-devel] Complete, Corresponding Source (CCS) for a VLC binary release

Tue Jan 30 11:12:14 CET 2018

Hello Jean-Baptiste,

On Mon, Jan 29, 2018 at 01:49:08AM +0100, Jean-Baptiste Kempf wrote:
> > On Tue, Oct 24, 2017 at 02:27:14PM +0900, Lasse Kantola wrote:
> > > Currently, I am downloading the tarballs by doing "make fetch-all" in
> > > the contrib/win32 directory, using the link below as a reference.
> > > https://wiki.videolan.org/Win32Compile/#Prepare_3rd_party_libraries
> > > Some of the tarball URLs were not working, or lead to incorrect
> > > versions, but by using Google and the SHA512SUMS in contrib/src, it
> > > was possible to find correct versions for most of the tarballs.
> 
> If you could share some of those that were not present, that would be nice.
> 
> Since a bit now, I try to put everything possible under here:
> http://ftp.videolan.org/pub/contrib/

I checked the status of "make fetch-all" for vlc-2.2.2 source.
Note that I did not check any other version.

There are bunch of broken links, but most of those packages are
already available in http://ftp.videolan.org/pub/contrib/

The correct version of d3d11.idl can be determined, but it is a bit
hard to find.

The exact versions of mfx, tremor and x264 are not specified. For mfx
and tremor this is not an issue, because those are not part of the
default VLC configuration.

Detailed list of issues:
- Broken:  http://www.broadcom.com/docs/support/crystalhd/crystalhd_lgpl_includes_v1.zip
  - OK: http://ftp.videolan.org/pub/contrib/crystalhd_lgpl_includes_v1.zip
- Broken: http://heanet.dl.sourceforge.net/sourceforge/twolame/twolame-0.3.13.tar.gz
  - OK:  http://ftp.videolan.org/pub/contrib/twolame/twolame-0.3.13.tar.gz
- Broken: http://heanet.dl.sourceforge.net/sourceforge/projectm/2.0.1/projectM-2.0.1-Source.tar.gz
  - OK: http://ftp.videolan.org/pub/contrib/projectM/projectM-2.0.1-Source.tar.gz
- Broken: http://heanet.dl.sourceforge.net/sourceforge/zapping/zvbi-0.2.35.tar.bz2
  - OK:  http://ftp.videolan.org/pub/contrib/zvbi/zvbi-0.2.35.tar.bz2
- Broken: http://heanet.dl.sourceforge.net/sourceforge/libcddb/libcddb-1.3.2.tar.bz2
  - OK: http://ftp.videolan.org/pub/contrib/cddb/libcddb-1.3.2.tar.bz2
- Broken: http://heanet.dl.sourceforge.net/sourceforge/libvncserver/libvncserver/0.9.9/LibVNCServer-0.9.9.tar.gz
  - OK: http://ftp.videolan.org/pub/contrib/vncclient/LibVNCServer-0.9.9.tar.gz
- Broken: http://download.cinecert.com/asdcplib/asdcplib-1.12.58.tar.gz
  - OK: http://ftp.videolan.org/pub/contrib/asdcplib/asdcplib-1.12.58.tar.gz
- Broken: http://heanet.dl.sourceforge.net/sourceforge/modplug-xmms/libmodplug-0.8.8.5.tar.gz
  - OK: http://ftp.videolan.org/pub/contrib/modplug/libmodplug-0.8.8.5.tar.gz
- Broken: http://fribidi.org/download/fribidi-0.19.7.tar.bz2
  - OK: http://ftp.videolan.org/pub/contrib/fribidi/fribidi-0.19.7.tar.bz2
- Broken: http://heanet.dl.sourceforge.net/sourceforge/fluidsynth/fluidsynth-1.1.6/fluidsynth-1.1.6.tar.bz2
  - OK: http://ftp.videolan.org/pub/contrib/fluid/fluidsynth-1.1.6.tar.bz2
- Broken: http://openjpeg.googlecode.com/files/openjpeg-1.5.0.tar.gz
  - OK: http://ftp.videolan.org/pub/contrib/openjpeg/openjpeg-1.5.0.tar.gz
- Download hangs?: ftp://ftp.gnupg.org/gcrypt/libgcrypt/libgcrypt-1.6.4.tar.bz2
  - OK: http://ftp.videolan.org/pub/contrib/gcrypt/libgcrypt-1.6.4.tar.bz2
- Wrong non-pinned version: http://sourceforge.net/p/mingw-w64/mingw-w64/ci/master/tree/mingw-w64-headers/direct-x/include/d3d11.idl?format=raw
  - OK: https://sourceforge.net/p/mingw-w64/mingw-w64/ci/dcb758035e39fabf7e2756554d9a4042d90cd5e5/tree/mingw-w64-headers/direct-x/include/d3d11.idl?format=raw
  - NOTE: Manually downloaded d3d11.idl needs to be patched, before it matches the SHA512SUM.
- Non-pinned version & incorrect checksum of generated ZIP file: http://github.com/2of1/d2d1headers/archive/master.zip (d2d_headers.zip)
  - OK: http://ftp.videolan.org/pub/contrib/d2d_headers.zip
- Broken: http://libkate.googlecode.com/files/libkate-0.4.1.tar.gz
  - OK: http://ftp.videolan.org/pub/contrib/kate/libkate-0.4.1.tar.gz
- Broken: http://download.qt-project.org/official_releases/qt/5.2/5.2.1/submodules/qtbase-opensource-src-5.2.1.tar.xz
  - OK: http://ftp.videolan.org/pub/contrib/qt/qt-5.2.1.tar.xz
- Broken: http://growl.googlecode.com/files/Growl-1.2.2-src.tbz
  - OK: http://ftp.videolan.org/pub/contrib/growl/growl-1.2.2.tar.bz2
- Broken: http://heanet.dl.sourceforge.net/sourceforge/freetype/freetype2/2.6.2/freetype-2.6.2.tar.gz
  - OK: http://ftp.videolan.org/pub/contrib/freetype2/freetype-2.6.2.tar.gz
- Broken: http://game-music-emu.googlecode.com/files/game-music-emu-0.6.0.tar.bz2
  - OK: http://ftp.videolan.org/pub/contrib/gme/game-music-emu-0.6.0.tar.bz2
- Broken: http://heanet.dl.sourceforge.net/sourceforge/libpng/zlib-1.2.8.tar.gz
  - OK: http://ftp.videolan.org/pub/contrib/zlib/zlib-1.2.8.tar.gz
- Broken: http://heanet.dl.sourceforge.net/sourceforge/glew/glew/1.7.0/glew-1.7.0.tgz
  - OK: http://ftp.videolan.org/pub/contrib/glew/glew-1.7.0.tar.gz
- Broken: http://download.osgeo.org/libtiff/tiff-4.0.3.tar.gz
  - OK: http://ftp.videolan.org/pub/contrib/tiff/tiff-4.0.3.tar.gz
- Broken: http://heanet.dl.sourceforge.net/sourceforge/libpng/libpng16/1.6.19/libpng-1.6.19.tar.xz
  - OK: http://ftp.videolan.org/pub/contrib/png/libpng-1.6.19.tar.xz
- Broken: http://libtiger.googlecode.com/files/libtiger-0.3.1.tar.gz
  - OK: http://ftp.videolan.org/pub/contrib/tiger/libtiger-0.3.1.tar.gz
- Download hangs?: ftp://ftp.gnutls.org/gcrypt/gnutls/v3.2/gnutls-3.2.21.tar.xz
  - OK: http://ftp.videolan.org/pub/contrib/gnutls/gnutls-3.2.21.tar.xz
- Broken: http://heanet.dl.sourceforge.net/sourceforge/sidplay2/sidplay2/sidplay-libs-2.1.1/sidplay-libs-2.1.1.tar.gz
  - OK: http://ftp.videolan.org/pub/contrib/sidplay2/sidplay-libs-2.1.1.tar.gz
- Broken: http://heanet.dl.sourceforge.net/sourceforge/faac/faad2-2.7.tar.gz
  - OK: http://ftp.videolan.org/pub/contrib/faad2/faad2-2.7.tar.gz
- Broken: http://heanet.dl.sourceforge.net/sourceforge/lame/lame-3.99.5.tar.gz
  - OK: http://ftp.videolan.org/pub/contrib/lame/lame-3.99.5.tar.gz
- Broken: "http://heanet.dl.sourceforge.net/sourceforge/pupnp/libupnp-1.6.19.tar.bz2
  - OK: http://ftp.videolan.org/pub/contrib/upnp/libupnp-1.6.19.tar.bz2
- Packages without SHA512SUMS
  - bghudappkit: OK, because uses Git clone with a pinned version.
  - ffmpeg: OK, because uses versioned Git snapshot.
  - mfx: BAD, because uses Git clone, but version is not specified.
  - postproc: looks BAD, but OK in practice.
    - BAD, because uses Git snapshot without version information.
    - OK, because no version changes in Git after 2012, and the Git snapshot is bit-exact to http://ftp.videolan.org/pub/contrib/postproc-git.tar.gz
  - tremor: BAD, because uses SVN export without version information.
    - However, there are only 4 changes to Tremor SVN since 2013, so deducing the version should not be too difficult.
  - x264: BAD, because uses Git snapshot without version information ftp://ftp.videolan.org/pub/videolan/x264/snapshots/last_stable_x264.tar.bz2

> > > - Which contrib dependencies are included in the official VLC 2.2.2
> > >   Windows binary release?
> 
> I can share the folder, if you want, with all the tarballs.

Yes, please. This would resolve my questions completely.

Thank you and best regards,
Lasse