From mboxrd@z Thu Jan 1 00:00:00 1970 From: Leo Famulari Subject: bug#36614: rust@1.36's hash is incorrect. Date: Fri, 12 Jul 2019 13:23:50 -0400 Message-ID: <20190712172350.GA27603@jasmine.lan> References: <8736jby4go.fsf@gmx.com> <87pnmf2y1n.fsf@nckx> Mime-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="vtzGhvizbBRQ85DL" Return-path: Received: from eggs.gnu.org ([2001:470:142:3::10]:35962) by lists.gnu.org with esmtp (Exim 4.86_2) (envelope-from ) id 1hlzHA-0006SQ-4q for bug-guix@gnu.org; Fri, 12 Jul 2019 13:24:06 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1hlzH9-0003Js-4I for bug-guix@gnu.org; Fri, 12 Jul 2019 13:24:04 -0400 Received: from debbugs.gnu.org ([209.51.188.43]:60067) by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_128_CBC_SHA1:16) (Exim 4.71) (envelope-from ) id 1hlzH8-0003Ih-Sx for bug-guix@gnu.org; Fri, 12 Jul 2019 13:24:03 -0400 Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1hlzH8-00088S-Nd for bug-guix@gnu.org; Fri, 12 Jul 2019 13:24:02 -0400 Sender: "Debbugs-submit" Resent-Message-ID: Content-Disposition: inline In-Reply-To: List-Id: Bug reports for GNU Guix List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: bug-guix-bounces+gcggb-bug-guix=m.gmane.org@gnu.org Sender: "bug-Guix" To: Ivan Petkov Cc: 36614-done@debbugs.gnu.org --vtzGhvizbBRQ85DL Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Fri, Jul 12, 2019 at 09:33:50AM -0700, Ivan Petkov wrote: > A bit more detailed context: > The rust project makes pre-release sources available for testing ahead of > the formal release, and the process is meant to shake out any potential b= ugs. > I tested with the prerelease build originally, and after the real release > came out I updated the package URL to the formal release and immediately > rebuilt successfully. >=20 > I'm not 100% sure if maybe guix reused the cached tarball I had from earl= ier, > or whether the prerelease source was immediately upgraded to the formal r= elease > and fixed shortly after. (I did try rebuilding right before pushing the c= hange > out which succeeded with no changes, which I'm guessing is because guix d= id > not redownload the tarball and why I didn't notice the hash mismatch). Right, Guix looks up the sources locally by hash. So, if you change a URL but not the hash, and you have the old file with the same hash in /gnu/store, Guix will use the old file and you will not notice that the URL / hash pair is incorrect. --vtzGhvizbBRQ85DL Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEsFFZSPHn08G5gDigJkb6MLrKfwgFAl0owiMACgkQJkb6MLrK fwhpTA//eh7R/Fy0kbnS+A/SKBwupJhSChmXYVheZAqTka6FrRLSq42brAgeh7Zb FtcaFmMXzDe8dezeL7kJ0GqGrOFo5KHOWGqFDHH0Bhe/MP9GLtgeIx5s0EksWVow CDPBe5jw4yEg5xo0abh47cj+q6Fmwu4tXb4KhnlQtviRQEI+tuipGd1WFeRxX9es WdJ9YjWzBTEOnrp8/wAT5LqS+JPcl3kM99A3UOIkQslaDy5QB3u9NK1HP0Urm4y+ +AtsEclJTD3h0yumg1Vi5ZkorwV5mwp/vp9FluzBT+TXIXOPEME28rNfCbIS8WJh 6ey4q5WhWr1wwQblvQbrvrNKuy11WFtF542yqeULi/uw4t41trFVGR2Nyv4IiJEZ iEebbsBmGcWhMGJGatHOAc2MTTunKs9Ce/z8MItjnfaJNAwVHahi7ZfJc2Pm/kED NtOd5eNrkReyX8vOXXEcO/WAo1mKKMup363jdSoAfc97cPDFuv8Y5ozEglYF5FkI yTSqDdsrrA3rN6pGaPQJ7HEogY1C+u2hck2eZfl40KNUd0JFkgZP0w85Yix3Oxka slqybwdyqXm1rgYhfHSFyhUFDf9KjUEiH4U0Kd9GxDyGmTHAE2h7Tc/o8ONKtTxG lAf727T/yqxxBe+A7CgzZuXOpt+1BJpRSMWfnxa4wsJad68N8Us= =eWfp -----END PGP SIGNATURE----- --vtzGhvizbBRQ85DL--