No checksum recorded for tar-1.28-1-src, cannot determine integrity of package!

Houder houder@xs4all.nl
Mon Apr 18 09:37:00 GMT 2016


Hi,

For the record ...

After "installing" the source code tarball (tar), the following message 
in file
/var/log/setup.log.full made me inspect IniDBBuilderPackage.cc:

No checksum recorded for tar-1.28-1-src, cannot determine integrity of 
package!

-----
IniDBBuilderPackage.cc:

void
IniDBBuilderPackage::buildInstallSHA512 (unsigned char const *sha512)
{
   if (sha512 && !cbpv.source()->sha512_isSet) {
     memcpy (cbpv.source()->sha512sum, sha512, sizeof 
cbpv.source()->sha512sum);
     cbpv.source()->sha512_isSet = true;
   }
}

void
IniDBBuilderPackage::buildSourceSHA512 (unsigned char const *sha512)
{
   if (sha512 && !cbpv.source()->sha512_isSet) {
              >>> cbpv => cspv <<<

     memcpy (cspv.source()->sha512sum, sha512, sizeof 
cspv.source()->sha512sum);
     cbpv.source()->sha512_isSet = true;
   }
}

     I believe the developer meant to check the current source package 
version,
     not the current BINARY package version ...

void
IniDBBuilderPackage::buildInstallMD5 (unsigned char const *md5)
{
   if (md5 && !cbpv.source()->md5.isSet())
     cbpv.source()->md5.set(md5);
}

void
IniDBBuilderPackage::buildSourceMD5 (unsigned char const *md5)
{
   if (md5 && !cspv.source()->md5.isSet())
     cspv.source()->md5.set(md5);
}

Regards,
Henri

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple



More information about the Cygwin mailing list