Date: Tue, 14 Jan 2014 17:20:00 GMT From: =?utf-8?Q?Dag-Erling_Sm=C3=B8rgrav?= <des@des.no> To: freebsd-ports-bugs@FreeBSD.org Subject: Re: ports/185739 Message-ID: <201401141720.s0EHK0QJ040250@freefall.freebsd.org>
next in thread | raw e-mail | index | archive | help
The following reply was made to PR ports/185739; it has been noted by GNATS. From: =?utf-8?Q?Dag-Erling_Sm=C3=B8rgrav?= <des@des.no> To: freebsd-gnats-submit@freebsd.org Cc: Subject: Re: ports/185739 Date: Tue, 14 Jan 2014 18:11:30 +0100 =3D> Attempting to fetch http://builds.piwik.org/piwik-2.0.3.tar.gz fetch: http://builds.piwik.org/piwik-2.0.3.tar.gz: size mismatch: expected = 7287646, actual 7287497 The distinfo from your patch is SHA256 (piwik-2.0.3.tar.gz) =3D 03b7cb5ef571e40c831d1682b4010c7f64d62138a37= 3745c47b942225e80eca6 SIZE (piwik-2.0.3.tar.gz) =3D 7287646 whereas I get SHA256 (piwik-2.0.3.tar.gz) =3D 87f6b56701ff57d1ccaaacf0caaddbd03104ab7c85d= 6e8700d9e224b44e8b9dc SIZE (piwik-2.0.3.tar.gz) =3D 7287497 Could you confirm that the change is benign, i.e. not causes by someone inserting a trojan into the distribution tarball? (and while you're there, tell the upstream devs to never ever reroll a tarball without bumping the version number) DES --=20 Dag-Erling Sm=C3=B8rgrav - des@des.no
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?201401141720.s0EHK0QJ040250>