[Buildroot] [git commit] flot: add hash file

[Buildroot] [git commit] flot: add hash file

[Thomas Petazzoni]

commit: http://git.buildroot.net/buildroot/commit/?id=3ec8d9b753634afdb415a7ee66457f16a730a051
branch: http://git.buildroot.net/buildroot/commit/?id=refs/heads/master

Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
---
 package/flot/flot.hash |    2 ++
 1 files changed, 2 insertions(+), 0 deletions(-)

diff --git a/package/flot/flot.hash b/package/flot/flot.hash
new file mode 100644
index 0000000..9bf348a
--- /dev/null
+++ b/package/flot/flot.hash
@@ -0,0 +1,2 @@
+# Locally calculated
+sha256	d6bddb781ce8ab8bba82c535a0767c22e606cabd9dbb484027b8ff375a193952	flot-0.8.3.tar.gz

[Buildroot] [git commit] flot: add hash file

[Bernd Kuhls]

Am Tue, 28 Jul 2015 22:32:55 +0200 schrieb Thomas Petazzoni:

> diff --git a/package/flot/flot.hash b/package/flot/flot.hash new file
> mode 100644 index 0000000..9bf348a --- /dev/null +++
> b/package/flot/flot.hash @@ -0,0 +1,2 @@
> +# Locally calculated +sha256
> d6bddb781ce8ab8bba82c535a0767c22e606cabd9dbb484027b8ff375a193952
> flot-0.8.3.tar.gz

Hi Thomas,

I downloaded the tarball
http://www.flotcharts.org/downloads/flot-0.8.3.tar.gz
today and got a different sha256 checksum:

ERROR: flot-0.8.3.tar.gz has wrong sha256 hash:
ERROR: expected: 
d6bddb781ce8ab8bba82c535a0767c22e606cabd9dbb484027b8ff375a193952
ERROR: got     : 
ef9a873befe3ff5ea42ebf1c3657887265a1717744ca8ed0c2bd3dd736d16b21
ERROR: Incomplete download, or man-in-the-middle (MITM) attack

Shall I send a patch?

Regards, Bernd

[Buildroot] [git commit] flot: add hash file

[Thomas Petazzoni]

Hello,

On Sat, 30 Jan 2016 08:38:35 +0100, Bernd Kuhls wrote:

> I downloaded the tarball
> http://www.flotcharts.org/downloads/flot-0.8.3.tar.gz
> today and got a different sha256 checksum:
> 
> ERROR: flot-0.8.3.tar.gz has wrong sha256 hash:
> ERROR: expected: 
> d6bddb781ce8ab8bba82c535a0767c22e606cabd9dbb484027b8ff375a193952
> ERROR: got     : 
> ef9a873befe3ff5ea42ebf1c3657887265a1717744ca8ed0c2bd3dd736d16b21
> ERROR: Incomplete download, or man-in-the-middle (MITM) attack

I checked locally, and in my BR2_DL_DIR, I still have a tarball that
has the
d6bddb781ce8ab8bba82c535a0767c22e606cabd9dbb484027b8ff375a193952 hash,
but indeed if I re-download it, I get a tarball with the
ef9a873befe3ff5ea42ebf1c3657887265a1717744ca8ed0c2bd3dd736d16b21 hash.

> Shall I send a patch?

Yes, please do. It would also be great to notify upstream that they
shouldn't change their tarballs.

Thanks!

Thomas
-- 
Thomas Petazzoni, CTO, Free Electrons
Embedded Linux, Kernel and Android engineering
http://free-electrons.com

[Buildroot] [git commit] flot: add hash file

[Arnout Vandecappelle]

On 31-01-16 10:43, Thomas Petazzoni wrote:
> Hello,
> 
> On Sat, 30 Jan 2016 08:38:35 +0100, Bernd Kuhls wrote:
> 
>> I downloaded the tarball
>> http://www.flotcharts.org/downloads/flot-0.8.3.tar.gz
>> today and got a different sha256 checksum:
>>
>> ERROR: flot-0.8.3.tar.gz has wrong sha256 hash:
>> ERROR: expected: 
>> d6bddb781ce8ab8bba82c535a0767c22e606cabd9dbb484027b8ff375a193952
>> ERROR: got     : 
>> ef9a873befe3ff5ea42ebf1c3657887265a1717744ca8ed0c2bd3dd736d16b21
>> ERROR: Incomplete download, or man-in-the-middle (MITM) attack
> 
> I checked locally, and in my BR2_DL_DIR, I still have a tarball that
> has the
> d6bddb781ce8ab8bba82c535a0767c22e606cabd9dbb484027b8ff375a193952 hash,
> but indeed if I re-download it, I get a tarball with the
> ef9a873befe3ff5ea42ebf1c3657887265a1717744ca8ed0c2bd3dd736d16b21 hash.
> 
>> Shall I send a patch?
> 
> Yes, please do. It would also be great to notify upstream that they
> shouldn't change their tarballs.

 Perhaps we should first check what is different?

 Regards,
 Arnout


-- 
Arnout Vandecappelle                          arnout at mind be
Senior Embedded Software Architect            +32-16-286500
Essensium/Mind                                http://www.mind.be
G.Geenslaan 9, 3001 Leuven, Belgium           BE 872 984 063 RPR Leuven
LinkedIn profile: http://www.linkedin.com/in/arnoutvandecappelle
GPG fingerprint:  7493 020B C7E3 8618 8DEC 222C 82EB F404 F9AC 0DDF

[Buildroot] [git commit] flot: add hash file

[Thomas Petazzoni]

Dear Arnout Vandecappelle,

On Sun, 31 Jan 2016 21:08:03 +0100, Arnout Vandecappelle wrote:

>  Perhaps we should first check what is different?

I tried and from what I could see all the differences are in binary
files (pictures). I've uploaded both of them at:

 http://free-electrons.com/~thomas/pub/float-0.8.3.tar.gz.old
 http://free-electrons.com/~thomas/pub/float-0.8.3.tar.gz.new

Note that I did this analysis quickly between two FOSDEM talks, and I'm
not even sure I fully remember my conclusion.

Best regards,

Thomas
-- 
Thomas Petazzoni, CTO, Free Electrons
Embedded Linux, Kernel and Android engineering
http://free-electrons.com