bug#40017: hplip-3.20.2 source tarball hash mismatch

bug#40017: hplip-3.20.2 source tarball hash mismatch

[Mark H Weaver]

The following commit updated hplip to 3.20.2, but the actual hash of the
source tarball does not match the expected hash in the commit.

     Thanks,
       Mark

--8<---------------cut here---------------start------------->8---
commit ed2d015d293fb0ffa3e47f98f1db625b91420d94
Author: Tobias Geerinckx-Rice <me@tobias.gr>
Date:   Sat Mar 7 01:34:19 2020 +0100

  gnu: hplip: Update to 3.20.2.
  
  * gnu/packages/cups.scm (hplip): Update to 3.20.2.
--8<---------------cut here---------------end--------------->8---


--8<---------------cut here---------------start------------->8---
building /gnu/store/2gdh5gd2bx4f91v7vikpq7gq6vcil1bl-hplip-3.20.2.tar.gz.drv...

Starting download of /gnu/store/xnqrxpngp4505228zib9zp8b5n7v4ri6-hplip-3.20.2.tar.gz
From http://downloads.sourceforge.net/project/hplip/hplip/3.20.2/hplip-3.20.2.tar.gz...
following redirection to `https://phoenixnap.dl.sourceforge.net/project/hplip/hplip/3.20.2/hplip-3.20.2.tar.gz'...
downloading from http://downloads.sourceforge.net/project/hplip/hplip/3.20.2/hplip-3.20.2.tar.gz...
 hplip-3.20.2.tar.gz  24.5MiB                  1.0MiB/s 00:24 [##################] 100.0%
sha256 hash mismatch for /gnu/store/xnqrxpngp4505228zib9zp8b5n7v4ri6-hplip-3.20.2.tar.gz:
  expected hash: 1hkiyj29vzmz14cy68g94i617ymxinzvjvcsfdd78kcbd1s9vi4h
  actual hash:   00vcbpnp478l2v61mlxb4kr6q3gzkxspm4lwfky39f6ck72pqxb7
hash mismatch for store item '/gnu/store/xnqrxpngp4505228zib9zp8b5n7v4ri6-hplip-3.20.2.tar.gz'
build of /gnu/store/2gdh5gd2bx4f91v7vikpq7gq6vcil1bl-hplip-3.20.2.tar.gz.drv failed
--8<---------------cut here---------------end--------------->8---

bug#40017: hplip-3.20.2 source tarball hash mismatch

[Tobias Geerinckx-Rice via Bug reports for GNU Guix]

[-- Attachment #1.1: Type: text/plain, Size: 789 bytes --]

Mark,

Mark H Weaver 写道：
> The following commit updated hplip to 3.20.2, but the actual 
> hash of the
> source tarball does not match the expected hash in the commit.

[…]

> sha256 hash mismatch for 
> /gnu/store/xnqrxpngp4505228zib9zp8b5n7v4ri6-hplip-3.20.2.tar.gz:
>   expected hash: 
>   1hkiyj29vzmz14cy68g94i617ymxinzvjvcsfdd78kcbd1s9vi4h
>   actual hash: 
>   00vcbpnp478l2v61mlxb4kr6q3gzkxspm4lwfky39f6ck72pqxb7

Thanks.  This happens, although I wish it would stop.

The differences are: timestamps, differing .ppd.gz file order in 
.inc files, and a modified pre-compiled binary (locatedriver). 
Luckily, the latter is snippeted out, leaving only harmless 
changes AFAICT.

Here's the original diff, although the list will probably scrub 
it:


[-- Attachment #1.2: hplipdiff.lz --]
[-- Type: application/octet-stream, Size: 145051 bytes --]

[-- Attachment #1.3: Type: text/plain, Size: 225 bytes --]


The world would be a better place if $big_hosters didn't allow 
rewriting tarballs in-place.  But then people would upload their 
privkeys and cry.

Fixed with 6048241f10210c79925ca40b75c8697d2b2a5848.

Kind regards,

T G-R

[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 832 bytes --]