According to this message on the cython mailing list: http://mail.python.org/pipermail/cython-devel/2011-March/000170.html and this bug on the macport tracker: https://trac.macports.org/ticket/28682 two different release tarball were produced for cython-0.14.1 by mistake. The one on the cython website had a few more commits compared to the one posted on pypi. While it may seem fairly harmless it leads to some strange compilation failures on some systems: https://github.com/cschwan/sage-on-gentoo/issues/81 The tarball included in distfile and the cython manifest need to be updated to take care of this. Note that upstream has admitted the issue and updated the tarball on their website.
The current SRC_URI points to <http://www.cython.org/release/Cython-0.14.1.tar.gz>, not <http://pypi.python.org/packages/source/C/Cython/Cython-0.14.1.tar.gz>. The former is newer than the latter. Which is the right one to use?
(In reply to comment #1) > The current SRC_URI points to > <http://www.cython.org/release/Cython-0.14.1.tar.gz>, > not > <http://pypi.python.org/packages/source/C/Cython/Cython-0.14.1.tar.gz>. > > The former is newer than the latter. Which is the right one to use? If you read the attached url you'll see that <http://www.cython.org/release/Cython-0.14.1.tar.gz> has been copied back from <http://pypi.python.org/packages/source/C/Cython/Cython-0.14.1.tar.gz> at some point. So they should be identical at this point in time. But the one we have on the mirror is a wrong one that has been replaced upstream. The right one should have a size of 1314345, the one currently on the mirror has a size of 1315824.
rafael@luka ~ $ sha1sum Cython-0.14.1.tar.gz Cython-pypi-0.14.1.tar.gz 2edc619bea5636fdc265d21112cd4a3654132603 Cython-0.14.1.tar.gz 2edc619bea5636fdc265d21112cd4a3654132603 Cython-pypi-0.14.1.tar.gz rafael@luka ~ $ grep Cython-0.14.1.tar.gz /development/cvs/gentoo-x86/dev-python/cython/Manifest | sed 's/^.*SHA1 \([^ ]*\).*$/\1/' 2edc619bea5636fdc265d21112cd4a3654132603 djc fixed this some time ago. This bug is duplicate of #361579. File in our mirrors is ok. Both files are the same, that's the same of Manifest. Closing. *** This bug has been marked as a duplicate of bug 361579 ***
OK after more checking you are right upstream now distribute the tarball of size 1315824 instead of 1314345 as it was doing originally. It's a shame because from the point of view of the software I am looking at the currently distributed cython is broken. But that's upstream problem not Gentoo's, sorry for the noise.
