Bugzilla Bug 185151

when I try to emerge awstats 6.5-r1 or 6.5-r2, I get
!!! Digest verification failed:
!!! /distfiles/awstats-6.5.tar.gz
!!! Reason: Filesize does not match recorded size
!!! Got: 1051780
!!! Expected: 972275


Reproducible: Always

Steps to Reproduce:
1. emerge awstats

Actual Results:  
Digest verification failed

Expected Results:  
Successful emerge

Works just fine here, delete the tarball and refetch.

$ ebuild awstats-6.5-r2.ebuild fetch
>>> Downloading 'ftp://ftp.fi.muni.cz/pub/linux/gentoo/distfiles/awstats-6.5.tar.gz'
--05:07:49-- 
ftp://ftp.fi.muni.cz/pub/linux/gentoo/distfiles/awstats-6.5.tar.gz
           => `/usr/portage/distfiles/awstats-6.5.tar.gz'
Resolving ftp.fi.muni.cz... 147.251.48.205
Connecting to ftp.fi.muni.cz|147.251.48.205|:21... connected.
Logging in as anonymous ... Logged in!
==> SYST ... done.    ==> PWD ... done.
==> TYPE I ... done.  ==> CWD /pub/linux/gentoo/distfiles ... done.
==> PASV ... done.    ==> RETR awstats-6.5.tar.gz ... done.
Length: 972,275 (949K) (unauthoritative)

100%[==================================================================================================>]
972,275      377.28K/s             

05:08:03 (376.54 KB/s) - `/usr/portage/distfiles/awstats-6.5.tar.gz' saved
[972275]

 * checking ebuild checksums ;-) ...                                           
                                                        [ ok ]
 * checking auxfile checksums ;-) ...                                          
                                                        [ ok ]
 * checking miscfile checksums ;-) ...                                         
                                                        [ ok ]
 * checking awstats-6.5.tar.gz ;-) ...                                         
                                                        [ ok ]

It works for you because you use some mirror and it has necessary tar.gz
But SRC_URI from ebuild provides different tar.gz!
Of course, I've tried removing tarball and it didn't help.
As a temp. solution I've downloaded tarball from your url, but suppose the same
problem will have other users who don't use any GENTOO_MIRRORS in make.conf

Well, then upstream should damn stop messing with released tarballs!

should be fixed now

Seems not to be fixed.

When trying to emerge net-www/awstats-6.5-r1 I receive the following output:

>>> Unpacking source...
>>> Unpacking awstats-6.5.tar.gz to /var/tmp/portage/net-www/awstats-6.5-r1/work
 * Applying awstats-6.5-CVE-2006-2237-CVE-2006-1945.diff ...

 * Failed Patch: awstats-6.5-CVE-2006-2237-CVE-2006-1945.diff !
 *  (
/usr/portage/net-www/awstats/files/awstats-6.5-CVE-2006-2237-CVE-2006-1945.diff
)
 *
 * Include in your bugreport the contents of:
 *
 *  
/var/tmp/portage/net-www/awstats-6.5-r1/temp/awstats-6.5-CVE-2006-2237-CVE-2006-1945.diff-26539.out


!!! ERROR: net-www/awstats-6.5-r1 failed.
Call stack:
  ebuild.sh, line 1632:   Called dyn_unpack
  ebuild.sh, line 763:   Called qa_call 'src_unpack'
  ebuild.sh, line 44:   Called src_unpack
  awstats-6.5-r1.ebuild, line 32:   Called epatch
'/usr/portage/net-www/awstats/files/awstats-6.5-CVE-2006-2237-CVE-2006-1945.diff'
  eutils.eclass, line 304:   Called die

!!! Failed Patch: awstats-6.5-CVE-2006-2237-CVE-2006-1945.diff!
!!! If you need support, post the topmost build error, and the call stack if
relevant.
!!! A complete build log is located at
'/var/log/portage/net-www:awstats-6.5-r1:20070806-062816.log'.

Created an attachment (id=127031) [details]
Output of the failed patching process.