[Buildroot] [PATCH 1/3 v2] package: add hashes for SourceForge-hosted packages

Thomas Petazzoni thomas.petazzoni at free-electrons.com
Sun Dec 28 21:34:21 UTC 2014

Dear Yann E. MORIN,

On Sun, 28 Dec 2014 13:19:29 +0100, Yann E. MORIN wrote:
> Since SourceForge sometimes serves us faulty tarballs, we can tons of
> autobuild failures:
>     http://autobuild.buildroot.org/results/9fb/9fba5bf086a4e7a29e5f7156ec43847db7aacfc4/
>     http://autobuild.buildroot.org/results/6c8/6c837b244c45ac3b3a887734a371cd6d226cf216/
>     ...
> Fix that by adding hash files for all SourceForge-hosted packages (thos
> etht did not already have it).
> We normally prefer to use hashes published by upstream, but hunting them
> all one by one is a tedious task, so those hashes were all locally
> computed with a script that searched for SF-hosted packages, downloades
> the associated tarball, computed the hash, and stored it in the
> corresponding .hash file.
> Also, SF publishes sha1 hashes, while I used the stronger sha256, since
> sha1 is now considered to be relatively weak.
> Signed-off-by: "Yann E. MORIN" <yann.morin.1998 at free.fr>
> Cc: Peter Korsgaard <jacmet at uclibc.org>
> Cc: Thomas Petazzoni <thomas.petazzoni at free-electrons.com>
> Cc: Maxime Hadjinlian <maxime.hadjinlian at gmail.com>
> Cc: Richard Braun <rbraun at sceen.net>
> Cc: Nathaniel Roach <nroach44 at gmail.com>

Applied, thanks. I've verified that the hashes were matching here by

make $(git show | grep "^+++" | sed 's%.*package/\([^/]*\)/.*%\1-extract%' | sed 's/scons-extract/host-scons-extract/' | sed 's/swig-extract/host-swig-extract/' | sed 's/upx-extract/host-upx-extract/' | tr "\n" " ")

which ended successfully.


Thomas Petazzoni, CTO, Free Electrons
Embedded Linux, Kernel and Android engineering

More information about the buildroot mailing list