[Buildroot] [git commit] boot/at91bootstrap3: fix hash
Thomas Petazzoni
thomas.petazzoni at bootlin.com
Thu Dec 26 22:21:19 UTC 2019
commit: https://git.buildroot.net/buildroot/commit/?id=cfb10c2d59436b642e761848d20c3cbb63a413c6
branch: https://git.buildroot.net/buildroot/commit/?id=refs/heads/master
When at91bootstrap3 was bumped to 3.9.0 in commit
513899e471890f4eb677066876890d43ea91b25e, an incorrect hash was set:
it was the hash of the tarball generated by the Git download logic of
Buildroot, and not the hash of the tarball auto-generated by Github,
which is the one that we really download by default.
Fixes:
ERROR: at91bootstrap3-v3.9.0.tar.gz has wrong sha256 hash:
ERROR: expected: 9960b0d18fe42feee566d4c52efa0d7c8251685bf9acfdf343f30a27951ada1e
ERROR: got : e23e6df23b79ca81e412cb73a1f48bd95df8d46c7d52a1d073c2ed9d4f3a1a71
ERROR: Incomplete download, or man-in-the-middle (MITM) attack
Reported-by: Ludovic Desroches <ludovic.desroches at microchip.com>
Signed-off-by: Pierre-Jean Texier <pjtexier at koncepto.io>
[Thomas: improved commit log]
Signed-off-by: Thomas Petazzoni <thomas.petazzoni at bootlin.com>
---
boot/at91bootstrap3/at91bootstrap3.hash | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/boot/at91bootstrap3/at91bootstrap3.hash b/boot/at91bootstrap3/at91bootstrap3.hash
index 93f495f468..b2ad6241db 100644
--- a/boot/at91bootstrap3/at91bootstrap3.hash
+++ b/boot/at91bootstrap3/at91bootstrap3.hash
@@ -1,2 +1,2 @@
# Locally calculated
-sha256 9960b0d18fe42feee566d4c52efa0d7c8251685bf9acfdf343f30a27951ada1e at91bootstrap3-v3.9.0.tar.gz
+sha256 e23e6df23b79ca81e412cb73a1f48bd95df8d46c7d52a1d073c2ed9d4f3a1a71 at91bootstrap3-v3.9.0.tar.gz
More information about the buildroot
mailing list