bug#30436: bigloo@4.3b hash mismatch

[Kei Kebreau <kkebreau@posteo.net>]

[-- Attachment #1: Type: text/plain, Size: 1408 bytes --]

ludo@gnu.org (Ludovic Courtès) writes:

> Hello Kei,
>
> Kei Kebreau <kkebreau@posteo.net> skribis:
>
>> ludo@gnu.org (Ludovic Courtès) writes:
>
> [...]
>
>>> The original tarball should be available at:
>>>
>>>   https://mirror.hydra.gnu.org/file/bigloo4.3b.tar.gz/sha256/1xpzxjlq5g8j3jrb908kfaaa0pkynk4rd083hzvb08amhy68sx07
>>>
>>> … but it’s not.
>>>
>>> Kei, could you check if you still have the tarball with this hash and
>>> how it differs from the current one?
>>>
>>> Unfortunately Bigloo’s maintainer tends to overwrite files in place so
>>> it’s likely that the file was modified after Kei committed the upgrade.
>>>
>>> Thanks,
>>> Ludo’.
>>
>> I do have the "original" tarball, but I don't know how I can transfer it
>> to you for inspection (if that is even necessary). However, I have
>> attached changelog differences between the two source trees. I'd send
>> the full diffoscope report, but its size is about 127 megabytes! The
>> difference seems to be a string of miscellaneous fixes and changes.
>
> Yeah, that’s what I expected.  :-/  Thanks for checking.
>
> Could you update the hash to the current hash in the ‘bigloo’ package
> definition?  Please add “Fixes <https://bugs.gnu.org/30436>.” to the
> commit log so people can later see why we changed the hash.
>
> Thank you!
>
> Ludo’.

Done! Thanks to all involved.

[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 832 bytes --]