GNU bug report logs - #30436
bigloo@4.3b hash mismatch

Previous Next

Full log

Message #27 received at 30436-done <at> debbugs.gnu.org (full text, mbox):

From: Kei Kebreau <kkebreau <at> posteo.net>
To: ludo <at> gnu.org (Ludovic Courtès)
Cc: 30436-done <at> debbugs.gnu.org, Amirouche Boubekki <amirouche <at> hypermove.net>,
 Leo Famulari <leo <at> famulari.name>
Subject: Re: bug#30436: bigloo <at> 4.3b hash mismatch
Date: Fri, 16 Feb 2018 14:50:20 -0500

[Message part 1 (text/plain, inline)]

ludo <at> gnu.org (Ludovic Courtès) writes:

> Hello Kei,
>
> Kei Kebreau <kkebreau <at> posteo.net> skribis:
>
>> ludo <at> gnu.org (Ludovic Courtès) writes:
>
> [...]
>
>>> The original tarball should be available at:
>>>
>>>   https://mirror.hydra.gnu.org/file/bigloo4.3b.tar.gz/sha256/1xpzxjlq5g8j3jrb908kfaaa0pkynk4rd083hzvb08amhy68sx07
>>>
>>> … but it’s not.
>>>
>>> Kei, could you check if you still have the tarball with this hash and
>>> how it differs from the current one?
>>>
>>> Unfortunately Bigloo’s maintainer tends to overwrite files in place so
>>> it’s likely that the file was modified after Kei committed the upgrade.
>>>
>>> Thanks,
>>> Ludo’.
>>
>> I do have the "original" tarball, but I don't know how I can transfer it
>> to you for inspection (if that is even necessary). However, I have
>> attached changelog differences between the two source trees. I'd send
>> the full diffoscope report, but its size is about 127 megabytes! The
>> difference seems to be a string of miscellaneous fixes and changes.
>
> Yeah, that’s what I expected.  :-/  Thanks for checking.
>
> Could you update the hash to the current hash in the ‘bigloo’ package
> definition?  Please add “Fixes <https://bugs.gnu.org/30436>.” to the
> commit log so people can later see why we changed the hash.
>
> Thank you!
>
> Ludo’.

Done! Thanks to all involved.

[signature.asc (application/pgp-signature, inline)]

Previous Next

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.