Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 145038 - dev-java/java-config digest verification failure
Summary: dev-java/java-config digest verification failure
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: New packages (show other bugs)
Hardware: All Linux
: High normal (vote)
Assignee: Java team
URL:
Whiteboard:
Keywords:
: 145057 145075 145076 (view as bug list)
Depends on:
Blocks:
 
Reported: 2006-08-24 22:59 UTC by Heiko Baums
Modified: 2007-03-16 09:36 UTC (History)
7 users (show)

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Heiko Baums 2006-08-24 22:59:30 UTC
dev-java/java-config-2.0.27-r1 and dev-java/java-config-1.3.1-r1 produce a digest verification failure.

emerge -f gives these error messages:

>>> Emerging (12 of 18) dev-java/java-config-2.0.27-r1 to /
 * java-config-2.0.27.tar.bz2 MD5 ;-) ...                                                                                                        [ ok ]
 * java-config-2.0.27.tar.bz2 RMD160 ;-) ...                                                                                                     [ ok ]
 * java-config-2.0.27.tar.bz2 SHA1 ;-) ...                                                                                                       [ ok ]
 * java-config-2.0.27.tar.bz2 SHA256 ;-) ...                                                                                                     [ ok ]
 * java-config-2.0.27.tar.bz2 size ;-) ...                                                                                                       [ ok ]
 * checking ebuild checksums ;-) ...                                                                                                             [ ok ]
 * checking auxfile checksums ;-) ...                                                                                                            [ !! ]
!!! Digest verification failed:
!!! /usr/portage/dev-java/java-config/files/java-config-2.profiled
!!! Reason: Filesize does not match recorded size
!!! Got: 762
!!! Expected: 768

!!! Fetch for /usr/portage/dev-java/java-config/java-config-2.0.27-r1.ebuild failed, continuing...


>>> Emerging (13 of 18) dev-java/java-config-1.3.1-r1 to /
 * java-config-1.3.1.tar.bz2 MD5 ;-) ...                                                                                                         [ ok ]
 * java-config-1.3.1.tar.bz2 RMD160 ;-) ...                                                                                                      [ ok ]
 * java-config-1.3.1.tar.bz2 SHA1 ;-) ...                                                                                                        [ ok ]
 * java-config-1.3.1.tar.bz2 SHA256 ;-) ...                                                                                                      [ ok ]
 * java-config-1.3.1.tar.bz2 size ;-) ...                                                                                                        [ ok ]
 * checking ebuild checksums ;-) ...                                                                                                             [ ok ]
 * checking auxfile checksums ;-) ...                                                                                                            [ !! ]
!!! Digest verification failed:
!!! /usr/portage/dev-java/java-config/files/java-config-2.profiled
!!! Reason: Filesize does not match recorded size
!!! Got: 762
!!! Expected: 768

!!! Fetch for /usr/portage/dev-java/java-config/java-config-1.3.1-r1.ebuild failed, continuing...
Comment 1 Jakub Moc (RETIRED) gentoo-dev 2006-08-25 03:07:10 UTC
*** Bug 145057 has been marked as a duplicate of this bug. ***
Comment 2 Benjamin Smee (strerror) (RETIRED) gentoo-dev 2006-08-25 03:23:37 UTC
same here .. Should really CHECK this type of thing before committing ...
Comment 3 Josh Nichols (RETIRED) gentoo-dev 2006-08-25 06:09:20 UTC
I really don't know how this happened. The difference in the file between what I had in my checkout and what was in cvs was:

-# $Header: /var/cvsroot/gentoo-x86/dev-java/java-config/files/java-config-2.profiled,v 1.3 2006/08/25 02:13:17 nichoj Exp $
+# $Header: /var/cvsroot/gentoo-x86/dev-java/java-config/files/Attic/java-config-2.profiled,v 1.3 2006/08/25 02:13:17 nichoj Exp $

In any event, I redigest it, so it is fixed in CVS now. Give it a few hours to hit your local rsync mirror.
Comment 4 Jakub Moc (RETIRED) gentoo-dev 2006-08-25 06:51:15 UTC
*** Bug 145075 has been marked as a duplicate of this bug. ***
Comment 5 Jakub Moc (RETIRED) gentoo-dev 2006-08-25 07:26:11 UTC
*** Bug 145076 has been marked as a duplicate of this bug. ***
Comment 6 Matthew Dirks 2006-08-25 09:11:22 UTC
(In reply to comment #3)
> I really don't know how this happened. The difference in the file between what
> I had in my checkout and what was in cvs was:
> 
> -# $Header:
> /var/cvsroot/gentoo-x86/dev-java/java-config/files/java-config-2.profiled,v 1.3
> 2006/08/25 02:13:17 nichoj Exp $
> +# $Header:
> /var/cvsroot/gentoo-x86/dev-java/java-config/files/Attic/java-config-2.profiled,v
> 1.3 2006/08/25 02:13:17 nichoj Exp $
> 
> In any event, I redigest it, so it is fixed in CVS now. Give it a few hours to
> hit your local rsync mirror.
> 

Any change in file content/size (even just one character) is going to affect the hash codes (MD5, SHA256), and drastically at that. It would probably help if something was set up to automatically run redigest all files in a package upon arrival of new/updated file(s) so that this error could be avoided in the future. 

Also, these errors are easily bypassed by filling the expected values into the Manifest in place of the invalid ones, but that just defeats point of having the size and checksum in the Manifest file for validation.