[Buildroot] [PATCH 001/113] dbus-python: add hash file

[Thomas Petazzoni]

Dear Gustavo Zacarias,

On Tue, 28 Jul 2015 15:39:02 -0300, Gustavo Zacarias wrote:
> Signed-off-by: Gustavo Zacarias <gustavo at zacarias.com.ar>
> ---
>  package/dbus-python/dbus-python.hash | 2 ++
>  1 file changed, 2 insertions(+)
>  create mode 100644 package/dbus-python/dbus-python.hash

I've applied the entire series, thanks. I found two "issues":

 * The title "maccchanger: add hash file" was wrong, it should have
   been "macchanger: add hash file", i.e only two C and not three.

 * I had a previous flot-0.8.3.tar.gz tarball in my download folder,
   and its hash didn't match the one you used. So it re-downloaded a
   new tarball, and the new one matched your hash. So this seems to
   indicate that upstream is changing the tarball without renaming it,
   which might lead to troubles in the future:

ERROR: flot-0.8.3.tar.gz has wrong sha256 hash:
ERROR: expected: d6bddb781ce8ab8bba82c535a0767c22e606cabd9dbb484027b8ff375a193952
ERROR: got     : ef9a873befe3ff5ea42ebf1c3657887265a1717744ca8ed0c2bd3dd736d16b21
ERROR: Incomplete download, or man-in-the-middle (MITM) attack
dl-wrapper: Re-downloading 'flot-0.8.3.tar.gz'...
--2015-07-28 22:38:07--  http://www.flotcharts.org/downloads/flot-0.8.3.tar.gz
Résolution de www.flotcharts.org (www.flotcharts.org)… 185.31.18.133
Connexion à www.flotcharts.org (www.flotcharts.org)|185.31.18.133|:80… connecté.
requête HTTP transmise, en attente de la réponse… 200 OK
Taille : 596913 (583K) [application/octet-stream]
Enregistre : «/home/thomas/projets/buildroot/output/build/.flot-0.8.3.tar.gz.tNaf6x/output»

/home/thomas/projets/buildroot/output/build/.f 100%[====================================================================================================>] 582,92K  1,54MB/s   ds 0,4s   

2015-07-28 22:38:08 (1,54 MB/s) - «/home/thomas/projets/buildroot/output/build/.flot-0.8.3.tar.gz.tNaf6x/output» enregistré [596913/596913]

ERROR: flot-0.8.3.tar.gz has wrong sha256 hash:
ERROR: expected: d6bddb781ce8ab8bba82c535a0767c22e606cabd9dbb484027b8ff375a193952
ERROR: got     : ef9a873befe3ff5ea42ebf1c3657887265a1717744ca8ed0c2bd3dd736d16b21
ERROR: Incomplete download, or man-in-the-middle (MITM) attack
--2015-07-28 22:38:08--  http://sources.buildroot.net/flot-0.8.3.tar.gz
Résolution de sources.buildroot.net (sources.buildroot.net)… 176.9.16.109
Connexion à sources.buildroot.net (sources.buildroot.net)|176.9.16.109|:80… connecté.
requête HTTP transmise, en attente de la réponse… 200 OK
Taille : 591931 (578K) [application/x-gzip]
Enregistre : «/home/thomas/projets/buildroot/output/build/.flot-0.8.3.tar.gz.burCoL/output»

/home/thomas/projets/buildroot/output/build/.f 100%[====================================================================================================>] 578,06K  2,15MB/s   ds 0,3s   

2015-07-28 22:38:14 (2,15 MB/s) - «/home/thomas/projets/buildroot/output/build/.flot-0.8.3.tar.gz.burCoL/output» enregistré [591931/591931]

flot-0.8.3.tar.gz: OK (sha256: d6bddb781ce8ab8bba82c535a0767c22e606cabd9dbb484027b8ff375a193952)

    Hum, now that I look at it, your hash is in fact only correct for
    the sources.buildroot.net copy of the tarball, not for the upstream
    one.

Can you check that?

Thanks,

Thomas
-- 
Thomas Petazzoni, CTO, Free Electrons
Embedded Linux, Kernel and Android engineering
http://free-electrons.com