diff mbox

[001/113] dbus-python: add hash file

Message ID 1438108854-11932-1-git-send-email-gustavo@zacarias.com.ar
State Accepted
Headers show

Commit Message

Gustavo Zacarias July 28, 2015, 6:39 p.m. UTC
Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
---
 package/dbus-python/dbus-python.hash | 2 ++
 1 file changed, 2 insertions(+)
 create mode 100644 package/dbus-python/dbus-python.hash

Comments

Thomas Petazzoni July 28, 2015, 8:43 p.m. UTC | #1
Dear Gustavo Zacarias,

On Tue, 28 Jul 2015 15:39:02 -0300, Gustavo Zacarias wrote:
> Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
> ---
>  package/dbus-python/dbus-python.hash | 2 ++
>  1 file changed, 2 insertions(+)
>  create mode 100644 package/dbus-python/dbus-python.hash

I've applied the entire series, thanks. I found two "issues":

 * The title "maccchanger: add hash file" was wrong, it should have
   been "macchanger: add hash file", i.e only two C and not three.

 * I had a previous flot-0.8.3.tar.gz tarball in my download folder,
   and its hash didn't match the one you used. So it re-downloaded a
   new tarball, and the new one matched your hash. So this seems to
   indicate that upstream is changing the tarball without renaming it,
   which might lead to troubles in the future:

ERROR: flot-0.8.3.tar.gz has wrong sha256 hash:
ERROR: expected: d6bddb781ce8ab8bba82c535a0767c22e606cabd9dbb484027b8ff375a193952
ERROR: got     : ef9a873befe3ff5ea42ebf1c3657887265a1717744ca8ed0c2bd3dd736d16b21
ERROR: Incomplete download, or man-in-the-middle (MITM) attack
dl-wrapper: Re-downloading 'flot-0.8.3.tar.gz'...
--2015-07-28 22:38:07--  http://www.flotcharts.org/downloads/flot-0.8.3.tar.gz
Résolution de www.flotcharts.org (www.flotcharts.org)… 185.31.18.133
Connexion à www.flotcharts.org (www.flotcharts.org)|185.31.18.133|:80… connecté.
requête HTTP transmise, en attente de la réponse… 200 OK
Taille : 596913 (583K) [application/octet-stream]
Enregistre : «/home/thomas/projets/buildroot/output/build/.flot-0.8.3.tar.gz.tNaf6x/output»

/home/thomas/projets/buildroot/output/build/.f 100%[====================================================================================================>] 582,92K  1,54MB/s   ds 0,4s   

2015-07-28 22:38:08 (1,54 MB/s) - «/home/thomas/projets/buildroot/output/build/.flot-0.8.3.tar.gz.tNaf6x/output» enregistré [596913/596913]

ERROR: flot-0.8.3.tar.gz has wrong sha256 hash:
ERROR: expected: d6bddb781ce8ab8bba82c535a0767c22e606cabd9dbb484027b8ff375a193952
ERROR: got     : ef9a873befe3ff5ea42ebf1c3657887265a1717744ca8ed0c2bd3dd736d16b21
ERROR: Incomplete download, or man-in-the-middle (MITM) attack
--2015-07-28 22:38:08--  http://sources.buildroot.net/flot-0.8.3.tar.gz
Résolution de sources.buildroot.net (sources.buildroot.net)… 176.9.16.109
Connexion à sources.buildroot.net (sources.buildroot.net)|176.9.16.109|:80… connecté.
requête HTTP transmise, en attente de la réponse… 200 OK
Taille : 591931 (578K) [application/x-gzip]
Enregistre : «/home/thomas/projets/buildroot/output/build/.flot-0.8.3.tar.gz.burCoL/output»

/home/thomas/projets/buildroot/output/build/.f 100%[====================================================================================================>] 578,06K  2,15MB/s   ds 0,3s   

2015-07-28 22:38:14 (2,15 MB/s) - «/home/thomas/projets/buildroot/output/build/.flot-0.8.3.tar.gz.burCoL/output» enregistré [591931/591931]

flot-0.8.3.tar.gz: OK (sha256: d6bddb781ce8ab8bba82c535a0767c22e606cabd9dbb484027b8ff375a193952)

    Hum, now that I look at it, your hash is in fact only correct for
    the sources.buildroot.net copy of the tarball, not for the upstream
    one.

Can you check that?

Thanks,

Thomas
diff mbox

Patch

diff --git a/package/dbus-python/dbus-python.hash b/package/dbus-python/dbus-python.hash
new file mode 100644
index 0000000..94af72e
--- /dev/null
+++ b/package/dbus-python/dbus-python.hash
@@ -0,0 +1,2 @@ 
+# Locally calculated after checking pgp signature
+sha256	e12c6c8b2bf3a9302f75166952cbe41d6b38c3441bbc6767dbd498942316c6df	dbus-python-1.2.0.tar.gz