[tor-bugs] #11630 [Tor bundles/installation]: Creating HTTPS-Everywhere's rules.sqlite is non-deterministic

[Tor Bug Tracker & Wiki]

#11630: Creating HTTPS-Everywhere's rules.sqlite is non-deterministic
------------------------------------------+-------------------
     Reporter:  gk                        |      Owner:  erinn
         Type:  defect                    |     Status:  new
     Priority:  normal                    |  Milestone:
    Component:  Tor bundles/installation  |    Version:
   Resolution:                            |   Keywords:
Actual Points:                            |  Parent ID:
       Points:                            |
------------------------------------------+-------------------

Comment (by zyan):

 Ok, I ended up looking at this myself. The bytes that differ in the diff
 above are at:

 offset 27 - part of "File Change Counter"
 offset 43 - part of "Schema cookie"
 offset 95 - part of "version valid-for number" (which should usually be
 the same as the value of "File Change Counter" according to the docs)

 I'm guessing (based on the name) that the Schema cookie is initialized
 with a random value, so it ends up being non-deterministic. It's unclear
 to me whether the File Change Counter values are different because the
 sqlite writes are non-deterministic or because they're also being
 initialized to non-deterministic values. Either way, it seems that it
 would be fine to hard-code these values in the generated database in
 `makexpi.sh`.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/11630#comment:4>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online