From mboxrd@z Thu Jan 1 00:00:00 1970 Return-path: Received: from ptx.hi.pengutronix.de ([2001:6f8:1178:2:5054:ff:fec0:8e10] ident=Debian-exim) by metis.ext.pengutronix.de with esmtp (Exim 4.72) (envelope-from ) id 1TxFM8-0007yN-8K for ptxdist@pengutronix.de; Mon, 21 Jan 2013 12:16:00 +0100 Received: from mol by ptx.hi.pengutronix.de with local (Exim 4.72) (envelope-from ) id 1TxFM8-0003pZ-6n for ptxdist@pengutronix.de; Mon, 21 Jan 2013 12:16:00 +0100 Date: Mon, 21 Jan 2013 12:16:00 +0100 From: Michael Olbrich Message-ID: <20130121111600.GB4597@pengutronix.de> References: MIME-Version: 1.0 Content-Disposition: inline In-Reply-To: Subject: Re: [ptxdist] Wrong md5sum for klibc 1.5.25 tarball in rule file Reply-To: ptxdist@pengutronix.de List-Id: PTXdist Development Mailing List List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: ptxdist-bounces@pengutronix.de Errors-To: ptxdist-bounces@pengutronix.de To: ptxdist@pengutronix.de Hi, On Fri, Jan 18, 2013 at 06:17:20PM +0100, Dennis.Herbrich@hytera.de wrote: > Downloading klibc-1.5.25[0] as defined in the current ptxdist-git > rulefile yields a file of 611938 bytes and an md5sum of > 0c11c9c9d0c8b9e55c6689f43cee5a23. > > However, the rulefile expects 9ff935403b6f9193aaf52dc53769f290, which is > identical to the hash referred to by some other distributions like > Ubuntu, from where I got a copy of the "correct" file[1] with a size of > 611955 bytes and the expected md5sum. > > Following a hunch, I gunzipped both files, and lo and behold, the > resulting tar is actually identical, so there's likely no malice > involved: > > [deh@vulpes ~]$ md5sum klibc* > 313ed22fa9ef8586db473945248f5de2 klibc_1.5.25.orig.tar > 313ed22fa9ef8586db473945248f5de2 klibc-1.5.25.tar > > Now, what I'd like to achieve with this email is to warn about this > issue, and, well, a fixed md5sum in the next release of ptxdist. ;) > Unfortunately I cannot tell WHY the package has been changed, > causing this mismatch. If anybody knows a reason, I'd appreciate > to learn about it! If you look at http://www.kernel.org/pub/linux/libs/klibc/1.5/ you'll see that all versions of klibc got updated on 31-May-2012. Maybe related to the kernel.org hack? Anyways, the content is identical to the one with the old md5sum. I've updated the md5sum in ptxdist master. Michael -- Pengutronix e.K. | | Industrial Linux Solutions | http://www.pengutronix.de/ | Peiner Str. 6-8, 31137 Hildesheim, Germany | Phone: +49-5121-206917-0 | Amtsgericht Hildesheim, HRA 2686 | Fax: +49-5121-206917-5555 | -- ptxdist mailing list ptxdist@pengutronix.de