[oe] [Gpe-list] check sum failure http://gpe.linuxtogo.org/download/source/minimix-0.8.tar.bz2'

[Koen Kooi]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Koen Kooi schreef:
> Jon Smirl schreef:
>> NOTE: package minimix-0.8: started
>> NOTE: package minimix-0.8-r0: task do_fetch: started
>> NOTE: fetch http://gpe.linuxtogo.org/download/source/minimix-0.8.tar.bz2
>> --15:41:15--  http://gpe.linuxtogo.org/download/source/minimix-0.8.tar.bz2
>>            => `/extra/oe/sources/minimix-0.8.tar.bz2'
>> Resolving gpe.linuxtogo.org... 85.214.40.226
>> Connecting to gpe.linuxtogo.org|85.214.40.226|:80... connected.
>> HTTP request sent, awaiting response... 200 OK
>> Length: 68,451 (67K) [application/x-bzip2]
> 
>> 100%[===================================================================================>]
>> 68,451       128.62K/s
> 
>> 15:41:16 (128.51 KB/s) - `/extra/oe/sources/minimix-0.8.tar.bz2' saved
>> [68451/68451]
> 
>> NOTE: The MD5Sums did not match. Wanted:
>> '0cfb89bf2596710543935e31ad1d5a17' and Got:
>> '24ec8a3fb25fd0e497a0c64270b47d00'
>> NOTE: Task failed: Checksum of
>> 'http://gpe.linuxtogo.org/download/source/minimix-0.8.tar.bz2' failed
>> NOTE: package minimix-0.8-r0: task do_fetch: failed
>> ERROR: TaskFailed event exception, aborting
>> NOTE: package minimix-0.8: failed
>> ERROR: Build of
>> /extra/oe/org.openembedded.dev/packages/minimix/minimix_0.8.bb
>> do_fetch failed
>> ERROR: Task 272
>> (/extra/oe/org.openembedded.dev/packages/minimix/minimix_0.8.bb,
>> do_fetch) failed
>> NOTE: Tasks Summary: Attempted 2473 tasks of which 2473 didn't need to
>> be rerun and 1 failed.
>> ERROR: '/extra/oe/org.openembedded.dev/packages/minimix/minimix_0.8.bb' failed
> 
> It seems the source got replaced/corrupted/compromised, could a gpe person look into it? I
> have a tarball available with:
> 
> 0cfb89bf2596710543935e31ad1d5a17  OE/downloads/minimix-0.8.tar.bz2
> 
> As the checksummer expects.

The diff:

http://ewi546.ewi.utwente.nl/tmp/mm.diff

koen at bitbake:/data/build/koen/OE/build/tmp/angstrom/work$ diff -Nurd minimix-0.8.original/
minimix-0.8.compromised/ | diffstat
 ChangeLog    |   10
 Makefile.am  |    4
 Makefile.in  |   20
 aclocal.m4   |  196 ++-
 configure    | 3762 ++++++++++++++++++++++++++++++++++-------------------------
 configure.ac |   14
 depcomp      |   60
 gpe-dist.am  |    2
 install-sh   |   17
 minimix.c    |   32
 missing      |   23
 11 files changed, 2458 insertions(+), 1682 deletions(-)

Something is very wrong indeed....


regards,

Koen




-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (Darwin)

iD8DBQFGtN3sMkyGM64RGpERAsDpAJ4sTC6vECJPAz9LseK5mAHCJZBmagCgg6tA
COEnm0ENROxyiqNyZyak1AQ=
=OOlU
-----END PGP SIGNATURE-----