tool to compare/check rpm binaries

[Charles R. Anderson]

I've made a simple tool to check for differences in two rpm binary 
packages.  The script check for diffs in:

Provides
Requires
ldd output
nm output (minus addresses)
diff -r on unpacked tree

I've run it against the openssl builds in:

http://bugzilla.fedora.us/show_bug.cgi?id=1395

For 7.x, the diffs are reasonable (Provides on %{name} differs due to
differing release numbers, Requires adds ld-linux.so.2, binary files
differ).  However, for all the 8.0 builds, the symbol tables (nm
output) differ non-trivally.  Is this something we should be concerned
about?

The script and sample output showing nm diffs is attached.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: rpm-build-compare.sh
Type: application/x-sh
Size: 2665 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/fedora-legacy-list/attachments/20040321/43d258ad/attachment.sh>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: openssl-0.9.6b-36.8.legacy.i386.rpm-diff.txt.gz
Type: application/x-gzip
Size: 13883 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/fedora-legacy-list/attachments/20040321/43d258ad/attachment.bin>