[poky] SRC checksum checking broken

Richard Purdie richard.purdie at linuxfoundation.org
Tue Apr 17 14:20:49 PDT 2012


On Tue, 2012-04-17 at 10:59 -0600, Gary Thomas wrote:
> On 2012-04-17 10:19, Richard Purdie wrote:
> Well, it seems that the checksums are encouraged, if not required, these days.
> I was just making sure that they actually work & in my opinion, it shouldn't
> matter how you got the file, the checksums should still be checked and match.

You can argue this both ways. I'm leaning that direction although it has
its risks.

> Sadly, this is much worse.  It even [somehow] reached "through" my
> mirror setup and deleted the file on the backing store (i.e. the
> file /work/misc/Poky/sources/busybox-1.19.4.tar.bz2 gets deleted
> when the checksum fails even though it's part of the own-mirror)

Was that the only issue? I can see how it managed to do that, I agree it
shouldn't :/.

Cheers,

Richard




More information about the poky mailing list