Arch Linux User Repository

Good news: BinDiff 8 has been released as open source!

Bad news: Building the GUI requires a proprietary library whose functionality is not easily replaced by any FOSS library, so it's unlikely we'll be able to build the entire BinDiff package (including the GUI) from source any time soon.

For the moment, to get the package updated ASAP, I'm going to continue to use the pre-built Debian package as the source. Once the package is updated, I'll work on updating the PKGBUILD to replace the pre-built native binaries with binaries built from source, enabling the package to be installed on architectures other than just x86_64. And then once all of that's done, if people want me to I can split the package into two: One for just the native binaries that will be built from source, and the other for just the partly-proprietary GUI JAR that will be extracted from the pre-built package.

If that all sounds good, or if you think things should be done differently, please feel free to let me know in the comments.

Good news: BinDiff 8 has been released as open source!

Bad news: Building the GUI requires a proprietary library whose functionality is not easily replaced by any FOSS library, so it's unlikely we'll be able to build the entire BinDiff package (including the GUI) from source any time soon.

For the moment, to get the package updated ASAP, I'm going to continue to use the pre-built Debian package as the source. Once the package is updated, I'll work on updating the PKGBUILD to replace the pre-built native binaries with binaries built from source, enabling the package to be installed on architectures other than just x86_64. And then once all of that's done, if people want me to I can split the package into two: One for just the native binaries that will be built from source, and the other for just the partly-proprietary GUI JAR that will be extracted from the pre-built package.

If that all sounds good, or if you think things should be done differently, please feel free to let me know in the comments.

should be bindiff-bin

The latest version fails validation:

==> Making package: bindiff 7-3 (Sun 31 Jul 2022 01:32:24 PM IDT)
==> Checking runtime dependencies...
==> Checking buildtime dependencies...
==> Retrieving sources...
  -> Found bindiff_7_amd64.deb
  -> Found bindiff_7_amd64.deb.asc
==> Validating source files with sha256sums...
    bindiff_7_amd64.deb ... FAILED
    bindiff_7_amd64.deb.asc ... Skipped
==> ERROR: One or more files did not pass the validity check!
 -> error making: bindiff

I had to import the keys via:

curl https://dl.google.com/linux/linux_signing_key.pub | gpg --import -

@uzer I'd already figured out where the correct link was, but the package is still out of date. Bindiff is on version 6, so changing the version number to 6 and changing the source urls to the correct one like in your patch (and fixing the sha256sum, the pgp key doesn't need changing) is necessary to bring this package up to date.

@gardot426 My patch below addresses this problem.

-source=("https://dl.google.com/dl/zynamics/bindiff_${pkgver}_amd64.deb"{,.asc})
+source=("https://storage.googleapis.com/bindiff-releases/bindiff_${pkgver}_amd64.deb"{,.asc})

This package is completely broken. The sources lead to dead links.

Hi. I've created a patch to update the package to version 6. Can you please merge it?

From: 
Date: Wed, 18 Mar 2020 05:54:32 -0700
Subject: [PATCH] Updated Google mirror URL and package version to 6.

---
 PKGBUILD | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/PKGBUILD b/PKGBUILD
index 5541e3d..7e2a35e 100644
--- a/PKGBUILD
+++ b/PKGBUILD
@@ -1,7 +1,7 @@
 # Maintainer: David Manouchehri <manouchehri@riseup.net>

 pkgname=bindiff
-pkgver=5
+pkgver=6
 pkgrel=1
 pkgdesc="A comparison tool for binary files that assists vulnerability researchers and engineers to quickly find differences and similarities in disassembled code."
 arch=('x86_64')
@@ -11,8 +11,8 @@ depends=('desktop-file-utils' 'java-runtime>=8')
 options=('!strip')
 install=${pkgname}.install
 backup=("etc/opt/${pkgname}"/bindiff_{core,ui}.xml)
-source=("https://dl.google.com/dl/zynamics/bindiff_${pkgver}_amd64.deb"{,.asc})
-sha256sums=('cd859562803f58331fee5f0741e081edd2a470914fa9c60ef3db6fe06f058bc4'
+source=("https://storage.googleapis.com/bindiff-releases/bindiff_${pkgver}_amd64.deb"{,.asc})
+sha256sums=('f84dacaccfeb7d2ba34cfac711457be7f3a3c963470ed7b639615f9142ffde8d'
             'SKIP')
 validpgpkeys=('EB4C1BFD4F042F6DDDCCEC917721F63BD38B4796')  # Google Inc. (Linux Packages Signing Authority)

-- 
2.25.1