darcs

Issue 1886 wrong md5 sum for mac binary 2.4.4 ?

Title wrong md5 sum for mac binary 2.4.4 ?
Priority Status resolved
Milestone Resolved in
Superseder Nosy List dmitry.kurochkin, flo, ganesh, tomd.sec
Assigned To
Topics

Created on 2010-07-06.20:53:48 by tomd.sec, last changed 2010-07-09.10:03:15 by flo.

Messages
msg11690 (view) Author: tomd.sec Date: 2010-07-06.20:53:48
Hi all,

I downloaded the mac file

darcs-2.4.4-OSX-10.6-i386.tar.gz

 from  darcs' website http://wiki.darcs.net/Binaries.

I got the following md5 checksum:

MD5 (.../darcs-2.4.4-OSX-10.6-i386.tar.gz) = 48197b1bf0c217d044106cbafc41cf8e

But the md5- checksum from your file: darcs-2.4.4-OSX-10.6-i386.tar.gz.md5

is:

13bfa6a204700d28e55026709f879980  darcs-2.4.4-OSX-10.6-i386.tar.gz


Is this a security problem or only a small deployment bug ?


Thanks for a short reply in advance
and best regards,
Tom Degener
(Germany)
msg11699 (view) Author: ganesh Date: 2010-07-09.04:57:48
I see the same problem on the server, so it's not a downloading problem. 
I suspect a small deployment bug, but I can't be certain.

Florian, I guess this tarball came from you? If so, can you check that 
the .tar.gz is right and update the .md5 file if so? I notice that that 
.tar.gz is timestamped from a few hours after the .md5 file.
msg11701 (view) Author: flo Date: 2010-07-09.10:03:14
Thanks for the info. I don't know where that came from (most probably,
it is the md5-sum of the old 2.4.4 release with wrong --exact-version).
The darcs binary is the same as on my compilation system, so it should
be fine.

I updated the checksum.
History
Date User Action Args
2010-07-06 20:53:48tomd.seccreate
2010-07-09 04:57:49ganeshsetstatus: unknown -> needs-reproduction
nosy: + flo, ganesh
messages: + msg11699
2010-07-09 10:03:15flosetstatus: needs-reproduction -> resolved
messages: + msg11701