bug#30436: bigloo@4.3b hash mismatch

bug#30436: bigloo@4.3b hash mismatch

[Amirouche Boubekki]

Trying to install bigloo@4.3b leads to a hash mismatch.

This was reproduced by several people.

bug#30436: bigloo@4.3b hash mismatch

[Leo Famulari]

[-- Attachment #1: Type: text/plain, Size: 224 bytes --]

On Mon, Feb 12, 2018 at 05:43:35PM +0100, Amirouche Boubekki wrote:
> Trying to install bigloo@4.3b leads to a hash mismatch.
> 
> This was reproduced by several people.

Can you copy and paste the error message here?

[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 833 bytes --]

bug#30436: bigloo@4.3b hash mismatch

[Amirouche Boubekki]

On 2018-02-12 17:59, Leo Famulari wrote:
> On Mon, Feb 12, 2018 at 05:43:35PM +0100, Amirouche Boubekki wrote:
>> Trying to install bigloo@4.3b leads to a hash mismatch.
>> 
>> This was reproduced by several people.
> 
> Can you copy and paste the error message here?
$ guix package -i bigloo@4.3b
substitute: mise à jour de la liste des substituts depuis 
« https://mirror.hydra.gnu.org »... 100.0%
guile: warning: failed to install locale
warning: failed to install locale: Invalid argument

Starting download of 
/gnu/store/zjpxaz1k3g4dwn26xaic7m1n7i3zfqyr-bigloo4.3b.tar.gz
 From ftp://ftp-sop.inria.fr/indes/fp/Bigloo/bigloo4.3b.tar.gz...
  ...3b.tar.gz  35.4MiB              192KiB/s 03:09 
[####################] 100.0%
output path 
`/gnu/store/zjpxaz1k3g4dwn26xaic7m1n7i3zfqyr-bigloo4.3b.tar.gz' should 
have sha256 hash `1xpzxjlq5g8j3jrb908kfaaa0pkynk4rd083hzvb08amhy68sx07', 
instead has `1x7xdgsls277zlf6gcaxs2cj62xj6yvb0qxh0ddmxfamvxba0cf4'
cannot build derivation 
`/gnu/store/yz2if1m4wy2axhzx5883msq458r78p6d-bigloo4.3b.tar.xz.drv': 1 
dependencies couldn't be built
cannot build derivation 
`/gnu/store/ybclnrrl5dk24g4yhngi9ccf0ki6ra2m-bigloo-4.3b.drv': 1 
dependencies couldn't be built
guix package: error: build failed: build of 
`/gnu/store/ybclnrrl5dk24g4yhngi9ccf0ki6ra2m-bigloo-4.3b.drv' failed

bug#30436: bigloo@4.3b hash mismatch

[Ludovic Courtès]

Amirouche Boubekki <amirouche@hypermove.net> skribis:

> On 2018-02-12 17:59, Leo Famulari wrote:
>> On Mon, Feb 12, 2018 at 05:43:35PM +0100, Amirouche Boubekki wrote:
>>> Trying to install bigloo@4.3b leads to a hash mismatch.
>>>
>>> This was reproduced by several people.
>>
>> Can you copy and paste the error message here?
> $ guix package -i bigloo@4.3b
> substitute: mise à jour de la liste des substituts depuis
> « https://mirror.hydra.gnu.org »... 100.0%
> guile: warning: failed to install locale
> warning: failed to install locale: Invalid argument
>
> Starting download of
> /gnu/store/zjpxaz1k3g4dwn26xaic7m1n7i3zfqyr-bigloo4.3b.tar.gz
> From ftp://ftp-sop.inria.fr/indes/fp/Bigloo/bigloo4.3b.tar.gz...
>  ...3b.tar.gz  35.4MiB              192KiB/s 03:09
> [####################] 100.0%
> output path
> `/gnu/store/zjpxaz1k3g4dwn26xaic7m1n7i3zfqyr-bigloo4.3b.tar.gz' should
> have sha256 hash
> `1xpzxjlq5g8j3jrb908kfaaa0pkynk4rd083hzvb08amhy68sx07', instead has
> `1x7xdgsls277zlf6gcaxs2cj62xj6yvb0qxh0ddmxfamvxba0cf4'

The original tarball should be available at:

  https://mirror.hydra.gnu.org/file/bigloo4.3b.tar.gz/sha256/1xpzxjlq5g8j3jrb908kfaaa0pkynk4rd083hzvb08amhy68sx07

… but it’s not.

Kei, could you check if you still have the tarball with this hash and
how it differs from the current one?

Unfortunately Bigloo’s maintainer tends to overwrite files in place so
it’s likely that the file was modified after Kei committed the upgrade.

Thanks,
Ludo’.

bug#30436: bigloo@4.3b hash mismatch

[Kei Kebreau]

[-- Attachment #1.1: Type: text/plain, Size: 1987 bytes --]

ludo@gnu.org (Ludovic Courtès) writes:

> Amirouche Boubekki <amirouche@hypermove.net> skribis:
>
>> On 2018-02-12 17:59, Leo Famulari wrote:
>>> On Mon, Feb 12, 2018 at 05:43:35PM +0100, Amirouche Boubekki wrote:
>>>> Trying to install bigloo@4.3b leads to a hash mismatch.
>>>>
>>>> This was reproduced by several people.
>>>
>>> Can you copy and paste the error message here?
>> $ guix package -i bigloo@4.3b
>> substitute: mise à jour de la liste des substituts depuis
>> « https://mirror.hydra.gnu.org »... 100.0%
>> guile: warning: failed to install locale
>> warning: failed to install locale: Invalid argument
>>
>> Starting download of
>> /gnu/store/zjpxaz1k3g4dwn26xaic7m1n7i3zfqyr-bigloo4.3b.tar.gz
>> From ftp://ftp-sop.inria.fr/indes/fp/Bigloo/bigloo4.3b.tar.gz...
>>  ...3b.tar.gz  35.4MiB              192KiB/s 03:09
>> [####################] 100.0%
>> output path
>> `/gnu/store/zjpxaz1k3g4dwn26xaic7m1n7i3zfqyr-bigloo4.3b.tar.gz' should
>> have sha256 hash
>> `1xpzxjlq5g8j3jrb908kfaaa0pkynk4rd083hzvb08amhy68sx07', instead has
>> `1x7xdgsls277zlf6gcaxs2cj62xj6yvb0qxh0ddmxfamvxba0cf4'
>
> The original tarball should be available at:
>
>   https://mirror.hydra.gnu.org/file/bigloo4.3b.tar.gz/sha256/1xpzxjlq5g8j3jrb908kfaaa0pkynk4rd083hzvb08amhy68sx07
>
> … but it’s not.
>
> Kei, could you check if you still have the tarball with this hash and
> how it differs from the current one?
>
> Unfortunately Bigloo’s maintainer tends to overwrite files in place so
> it’s likely that the file was modified after Kei committed the upgrade.
>
> Thanks,
> Ludo’.

I do have the "original" tarball, but I don't know how I can transfer it
to you for inspection (if that is even necessary). However, I have
attached changelog differences between the two source trees. I'd send
the full diffoscope report, but its size is about 127 megabytes! The
difference seems to be a string of miscellaneous fixes and changes.


[-- Attachment #1.2: bigloo_changelog_diff.txt --]
[-- Type: text/plain, Size: 3955 bytes --]

--- old_bigloo4.3b/ChangeLog	2018-01-29 10:04:09.000000000 -0500
+++ new_bigloo4.3b/ChangeLog	2018-02-09 10:47:03.000000000 -0500
@@ -1,4 +1,120 @@
-2018-01-29  Manuel Serrano <Manuel.Serrano@inria.fr>
+2018-02-09  Manuel Serrano <Manuel.Serrano@inria.fr>
+	Yet-another-Makefile-fix
+	<1763932ff2ff060de51989ce818ab1cd224838f9> [7947f41a]
+
+	Minor-Makefile-fix
+	<d216e4fbfb899dc7a5deee3056880e05743c698a> [a8d85a2b]
+
+	Yet-another-date.scm-fix
+	<44f518d5e6f32999975e509988fa5e3003cab2d7> [98898fda]
+
+2018-02-06  Manuel Serrano <Manuel.Serrano@inria.fr>
+	Makefile-fix
+	<3b11112d0fc135e596d0800d0eee5ab25bfb4b82> [2612fba3]
+
+	Merge
+	<b1136b1dd5de93a9238a950784b6ddaf74c43964> [130abe75]
+
+	Minor-Makefile-fix
+	<79bcb094f32b5a28dc5b0d888968c58a9ab0818b> [6c16c4a4]
+
+	Makefile-fix
+	<98cd49042fc0b830c904d2e4cbf0f9ebe870fddd> [e23e37f6]
+
+	LOGMSG-Tailrec-filter
+	<78328b0df14dcea576dedd2493931f30b5bbe8ce> [5d4d7d7e]
+
+2018-02-05  GitHub <noreply@github.com>
+	Merge-pull-request-3-from-donaldsonjw-4.3b
+	<096570709b0453f5accea0db0c4fc85a6320c8c2> [6637c061]
+
+2018-02-04  Joseph Donaldson <donaldsonjw@yahoo.com>
+	Merge-remote-tracking-branch-upstream-4.3b-into-4.3b
+	<096570709b0453f5accea0db0c4fc85a6320c8c2> [1f770e59]
+
+	Fix-recursive-inlining-optimization
+	<be5eeb0cc2d8cff529383b26bbcbae7f9b3057ff> [190cde8c]
+
+2018-02-03  Joseph Donaldson <donaldsonjw@yahoo.com>
+	Remove-debug-statements
+	<f8044a989c1d4135be0d6cbbb962a390d528235e> [0e9f69ea]
+
+	Enable-jvm-build-of-csv-and-improve-performance-of-csv-parsing
+	<912e710614388beddb539b016a7e4b12824c96d5> [c20fd097]
+
+2018-02-02  GitHub <noreply@github.com>
+	Merge-pull-request-2-from-donaldsonjw-4.3b
+	<1950fc6e3d026c1fd4b2b11df319ba9bb85541ed> [4463d1aa]
+
+2018-01-31  Joseph Donaldson <donaldsonjw@yahoo.com>
+	Support-overlapped-copying-of-normal-vectors
+	<8b277ca36e1166055efb3271a5044950f3cd52b5> [8d412256]
+
+	Patch-JVM-tests-again
+	<8c15efcd72feadcf51c7eb564c700d15c6a54204> [13dc2deb]
+
+	Patch-JVM-tests
+	<69a51e9522d4f343f90a62fea8ecce3cb2348345> [a3d5e940]
+
+	Travis-11
+	<368a55be566a92cb23a2813c3e9ff78ee5d9f2aa> [9e05b800]
+
+	Travis-10
+	<72f3da176d09f0b92f6ac60440ccbf2bacb63427> [9c4c9bb7]
+
+2018-01-30  Manuel Serrano <Manuel.Serrano@inria.fr>
+	Fix-configure-.afile
+	<f87d26f8286933940f2d6a540066191fc10ec851> [5d5cef36]
+
+	Travis-9
+	<974e875adee44378bfd7d9d986570ec5a49744e9> [534a9b35]
+
+	Travis-8
+	<8d8b6885bf8c6bafae0b273870943b513d60add1> [ae821111]
+
+	Travis-7
+	<5715e50963b8b320cbac6d74986abfc78f45807e> [19bc1b2e]
+
+	Travis-6
+	<4e03856d19b4c517ce5796bb572b6d88d5aaf513> [b7c21782]
+
+	Travis-5-disable-gstreamer
+	<f4c48f0034ede2338f740f68d19e3b722621ce1a> [43bff7ff]
+
+	Travis-4-disable-gstreamer
+	<c41c380da4f10ea3972dd8cf7236e983a7bebf95> [3aa55b03]
+
+	Travis-3
+	<ec79fd70cb7a74d46d572cbe081f3acba32acc8f> [d5068355]
+
+	Travis-again
+	<cc15c33b7218907309d8247f36a85ab68e1811b0> [d95c4109]
+
+	Fix-CI-travis-script
+	<e445fed8e9c6d5796a2c87e9d86edd6586d3f7a5> [b7fc56fc]
+
+	Merge-branch-4.3b-of-github.com-manuel-serrano-bigloo-into-4.3b
+	<d1b578f7961fa6c5e9ca7989e1701bda2aeb8982> [0e6fd242]
+
+	Add-CI-travis-support
+	<6b8d3e457a2edf4d6edd4ddfb2a860897340785d> [ce3dad5d]
+
+	Merge-pull-request-1-from-donaldsonjw-4.3b
+	<6857a50306781281c877f800866d567580f47fc2> [8c9067ba]
+
+2018-01-29  Joseph Donaldson <donaldsonjw@yahoo.com>
+	Support-overlapped-copying-of-homogenous-numeric-vectors
+	<2b8d4e4d4b5d77fd358839aa0ad43c411d0f719e> [2c995d42]
+
+	Bootstrap-api-issues-fix-bis
+	<b7e4d8b306d97075eefc6cf45b62a89e877c4aab> [522b4013]
+
+	Bootstrap-api-issues-fix
+	<2f6d4212daed80063209bba9ba0aeb3bfac95317> [37c480d0]
+
+	Fix-bootstrap-procedure
+	<bbc15ed35503bc2ba69395bc89fa97662e19fbaf> [6053df7a]
+
 	SET-REPL-ERROR-NOTIFIER
 	<7b0b4f0be4bfbb964f7c6b191a8094fef4c9867a> [3758f93b]
 

[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 832 bytes --]

bug#30436: bigloo@4.3b hash mismatch

[Ludovic Courtès]

Hello Kei,

Kei Kebreau <kkebreau@posteo.net> skribis:

> ludo@gnu.org (Ludovic Courtès) writes:

[...]

>> The original tarball should be available at:
>>
>>   https://mirror.hydra.gnu.org/file/bigloo4.3b.tar.gz/sha256/1xpzxjlq5g8j3jrb908kfaaa0pkynk4rd083hzvb08amhy68sx07
>>
>> … but it’s not.
>>
>> Kei, could you check if you still have the tarball with this hash and
>> how it differs from the current one?
>>
>> Unfortunately Bigloo’s maintainer tends to overwrite files in place so
>> it’s likely that the file was modified after Kei committed the upgrade.
>>
>> Thanks,
>> Ludo’.
>
> I do have the "original" tarball, but I don't know how I can transfer it
> to you for inspection (if that is even necessary). However, I have
> attached changelog differences between the two source trees. I'd send
> the full diffoscope report, but its size is about 127 megabytes! The
> difference seems to be a string of miscellaneous fixes and changes.

Yeah, that’s what I expected.  :-/  Thanks for checking.

Could you update the hash to the current hash in the ‘bigloo’ package
definition?  Please add “Fixes <https://bugs.gnu.org/30436>.” to the
commit log so people can later see why we changed the hash.

Thank you!

Ludo’.

bug#30436: bigloo@4.3b hash mismatch

[Kei Kebreau]

[-- Attachment #1: Type: text/plain, Size: 1408 bytes --]

ludo@gnu.org (Ludovic Courtès) writes:

> Hello Kei,
>
> Kei Kebreau <kkebreau@posteo.net> skribis:
>
>> ludo@gnu.org (Ludovic Courtès) writes:
>
> [...]
>
>>> The original tarball should be available at:
>>>
>>>   https://mirror.hydra.gnu.org/file/bigloo4.3b.tar.gz/sha256/1xpzxjlq5g8j3jrb908kfaaa0pkynk4rd083hzvb08amhy68sx07
>>>
>>> … but it’s not.
>>>
>>> Kei, could you check if you still have the tarball with this hash and
>>> how it differs from the current one?
>>>
>>> Unfortunately Bigloo’s maintainer tends to overwrite files in place so
>>> it’s likely that the file was modified after Kei committed the upgrade.
>>>
>>> Thanks,
>>> Ludo’.
>>
>> I do have the "original" tarball, but I don't know how I can transfer it
>> to you for inspection (if that is even necessary). However, I have
>> attached changelog differences between the two source trees. I'd send
>> the full diffoscope report, but its size is about 127 megabytes! The
>> difference seems to be a string of miscellaneous fixes and changes.
>
> Yeah, that’s what I expected.  :-/  Thanks for checking.
>
> Could you update the hash to the current hash in the ‘bigloo’ package
> definition?  Please add “Fixes <https://bugs.gnu.org/30436>.” to the
> commit log so people can later see why we changed the hash.
>
> Thank you!
>
> Ludo’.

Done! Thanks to all involved.

[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 832 bytes --]