[poky] SRC checksum checking broken
Richard Purdie
richard.purdie at linuxfoundation.org
Tue Apr 17 14:20:49 PDT 2012
On Tue, 2012-04-17 at 10:59 -0600, Gary Thomas wrote:
> On 2012-04-17 10:19, Richard Purdie wrote:
> Well, it seems that the checksums are encouraged, if not required, these days.
> I was just making sure that they actually work & in my opinion, it shouldn't
> matter how you got the file, the checksums should still be checked and match.
You can argue this both ways. I'm leaning that direction although it has
its risks.
> Sadly, this is much worse. It even [somehow] reached "through" my
> mirror setup and deleted the file on the backing store (i.e. the
> file /work/misc/Poky/sources/busybox-1.19.4.tar.bz2 gets deleted
> when the checksum fails even though it's part of the own-mirror)
Was that the only issue? I can see how it managed to do that, I agree it
shouldn't :/.
Cheers,
Richard
More information about the poky
mailing list