GNU bug report logs - #7155
[md5sum] does not accept

Previous Next

Full log

Message #29 received at 7155 <at> debbugs.gnu.org (full text, mbox):

From: Jim Meyering <jim <at> meyering.net>
To: Pádraig Brady <P <at> draigBrady.com>
Cc: 7155 <at> debbugs.gnu.org, Rimas Kudelis <rq <at> rq.lt>
Subject: Re: bug#7155: [md5sum] does not accept
Date: Fri, 16 Sep 2011 09:29:07 +0200

Pádraig Brady wrote:
> To summarize, the only caveat with my patch I think is that
> it will give a false error for BSD format checksums
> where the first entry has a file name starting with ' ' or '*'.
> That should be exceedingly rare though, and is a lot better
> than a false OK.

Oh.  I misunderstood.
We already accept one BSD variant:

  MD5 (f) = d41d8cd98f00b204e9800998ecf8427e

so I guess it's hard to reject another.

> Also in this case even without the patch, we're susceptible
> to the 'trojan' case above.
>
> The workaround is easy as you suggest:
>
>   sed 's/ /  /' files.md5 | md5sum -c
>
> However that is not easily discoverable.
> I'm 50:50, so I'll think a bit more.
> Hmm I might just document in info that
> the checksum utilities are compatible with
> the BSD ones when processed like:
>
>   md5 -r files... | sed 's/ /  /' > files.md5

Whichever you prefer.

Previous Next

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.