[Buildroot] [PATCH] package/at91bootstrap3: fix hash

Thomas Petazzoni thomas.petazzoni at bootlin.com
Thu Dec 26 20:59:51 UTC 2019


On Thu, 26 Dec 2019 21:49:43 +0100
Pierre-Jean Texier <pjtexier at koncepto.io> wrote:

> When at91bootstrap3 was bumped to 3.9.0 in commit 513899e471890f4eb677066876890d43ea91b25e,
> an incorrect hash was set.
> 
> However, after some checks on the archive with the wrong hash, it appears that it is identical to
> the one with the good hash.
> 
> Fixes:
> 
> ERROR: at91bootstrap3-v3.9.0.tar.gz has wrong sha256 hash:
> ERROR: expected: 9960b0d18fe42feee566d4c52efa0d7c8251685bf9acfdf343f30a27951ada1e
> ERROR: got     : e23e6df23b79ca81e412cb73a1f48bd95df8d46c7d52a1d073c2ed9d4f3a1a71
> ERROR: Incomplete download, or man-in-the-middle (MITM) attack
> 
> Reported-by: Ludovic Desroches <ludovic.desroches at microchip.com>
> Signed-off-by: Pierre-Jean Texier <pjtexier at koncepto.io>

Did you figure out how you got this bogus archive ? There are really no
differences ? Could you put the bogus archive online somewhere ?

Thanks!

Thomas
-- 
Thomas Petazzoni, CTO, Bootlin
Embedded Linux and Kernel engineering
https://bootlin.com


More information about the buildroot mailing list