(address . bug-guix@gnu.org)
13f9a491599a8c8a045b22c9781f1493@hypermove.net
Trying to install bigloo@4.3b leads to a hash mismatch.
This was reproduced by several people.
bigloo@4.3b hash mismatch
- Done
Details
- 4 participants
- Amirouche Boubekki
- Kei Kebreau
- Leo Famulari
- Ludovic Courtès
- Owner
- unassigned
- Submitted by
- Amirouche Boubekki
- Severity
- minor
A
L
(name . Amirouche Boubekki)(address . amirouche@hypermove.net)(address . 30436@debbugs.gnu.org)
20180212165958.GA26386@jasmine.lan
On Mon, Feb 12, 2018 at 05:43:35PM +0100, Amirouche Boubekki wrote:
Toggle quote (4 lines)
> Trying to install bigloo@4.3b leads to a hash mismatch.
>
> This was reproduced by several people.
Can you copy and paste the error message here?
-----BEGIN PGP SIGNATURE-----
iQIzBAABCAAdFiEEsFFZSPHn08G5gDigJkb6MLrKfwgFAlqByAoACgkQJkb6MLrK
fwiQvRAAkR9LeOnefBxZWZ61u/NJ8XoUS79WnJrQ6Dqd0vOAbKs1z8rVOWypf6hl
aSsVbSXCShM/Ux2UvldFsypPgiojAaHSwQqK+gALu/6aylYErrvTA2BL4R9SfbB4
A9/ap5zSLNu1lpFj3IJrJetfjDHDIhUbj9NbflZlrCS6iryiFnVwHk5HzSC3o25E
oVxhhR84vCT1cYFMtWtSdSr1fynibFv5ciWQ7h/Lw/TY59JghAqVD0czlYZUXD2U
7IjljQEc2OJrbysk8VtZxgFo94Oli0+mFsAs5nJABoq/031Lv99eb/4v8FDaeLGH
x7fIChEx9WVFSTjlh/p+TCI1usKmRLH+wFEjfYorS6pkTRUzWcTfkjAUjK+iL/NG
AYXt/ZW9sEVJk1Zst27lGqziRkAfdBpPlRCMHiWg2NPpkTx8ULI9GPXY828C7One
DTjOWNHLFmFmAkfqZa7zfrzyWj6k+9QtV4EfvIV1mogaxkBYeYyq+D4uq31ySeIw
jgu/k7A380ruNxnXGmo73VCRJij4FF8ZZQJSJqvhxSoyzAnng/B0LJFYxTUEbXs9
uWXNOev6Vwpc+nhjVgMsulEnLyPTnjGNx0dMoj28cD77P2pbgLdhg/d2Ax+Z6hkW
+8VH8ds9GatzrWGXMBWCKRLtYZIoYNXMfIBjHhnXpzIfjRsEkiQ=
=3guw
-----END PGP SIGNATURE-----
A
(name . Leo Famulari)(address . leo@famulari.name)(address . 30436@debbugs.gnu.org)
e40c864d96335aa9f668494bc7f44139@hypermove.net
On 2018-02-12 17:59, Leo Famulari wrote:
Toggle quote (6 lines)
> On Mon, Feb 12, 2018 at 05:43:35PM +0100, Amirouche Boubekki wrote:
>> Trying to install bigloo@4.3b leads to a hash mismatch.
>>
>> This was reproduced by several people.
>
> Can you copy and paste the error message here?
$ guix package -i bigloo@4.3b
substitute: mise à jour de la liste des substituts depuis
« https://mirror.hydra.gnu.org »... 100.0%
guile: warning: failed to install locale
warning: failed to install locale: Invalid argument
Starting download of
/gnu/store/zjpxaz1k3g4dwn26xaic7m1n7i3zfqyr-bigloo4.3b.tar.gz
From ftp://ftp-sop.inria.fr/indes/fp/Bigloo/bigloo4.3b.tar.gz...
...3b.tar.gz 35.4MiB 192KiB/s 03:09
[####################] 100.0%
output path
`/gnu/store/zjpxaz1k3g4dwn26xaic7m1n7i3zfqyr-bigloo4.3b.tar.gz' should
have sha256 hash `1xpzxjlq5g8j3jrb908kfaaa0pkynk4rd083hzvb08amhy68sx07',
instead has `1x7xdgsls277zlf6gcaxs2cj62xj6yvb0qxh0ddmxfamvxba0cf4'
cannot build derivation
`/gnu/store/yz2if1m4wy2axhzx5883msq458r78p6d-bigloo4.3b.tar.xz.drv': 1
dependencies couldn't be built
cannot build derivation
`/gnu/store/ybclnrrl5dk24g4yhngi9ccf0ki6ra2m-bigloo-4.3b.drv': 1
dependencies couldn't be built
guix package: error: build failed: build of
`/gnu/store/ybclnrrl5dk24g4yhngi9ccf0ki6ra2m-bigloo-4.3b.drv' failed
L
873723sls8.fsf@gnu.org
Amirouche Boubekki <amirouche@hypermove.net> skribis:
Toggle quote (24 lines)
> On 2018-02-12 17:59, Leo Famulari wrote:
>> On Mon, Feb 12, 2018 at 05:43:35PM +0100, Amirouche Boubekki wrote:
>>> Trying to install bigloo@4.3b leads to a hash mismatch.
>>>
>>> This was reproduced by several people.
>>
>> Can you copy and paste the error message here?
> $ guix package -i bigloo@4.3b
> substitute: mise à jour de la liste des substituts depuis
> « https://mirror.hydra.gnu.org »... 100.0%
> guile: warning: failed to install locale
> warning: failed to install locale: Invalid argument
>
> Starting download of
> /gnu/store/zjpxaz1k3g4dwn26xaic7m1n7i3zfqyr-bigloo4.3b.tar.gz
> From ftp://ftp-sop.inria.fr/indes/fp/Bigloo/bigloo4.3b.tar.gz...
> ...3b.tar.gz 35.4MiB 192KiB/s 03:09
> [####################] 100.0%
> output path
> `/gnu/store/zjpxaz1k3g4dwn26xaic7m1n7i3zfqyr-bigloo4.3b.tar.gz' should
> have sha256 hash
> `1xpzxjlq5g8j3jrb908kfaaa0pkynk4rd083hzvb08amhy68sx07', instead has
> `1x7xdgsls277zlf6gcaxs2cj62xj6yvb0qxh0ddmxfamvxba0cf4'
The original tarball should be available at:
… but it’s not.
Kei, could you check if you still have the tarball with this hash and
how it differs from the current one?
Unfortunately Bigloo’s maintainer tends to overwrite files in place so
it’s likely that the file was modified after Kei committed the upgrade.
Thanks,
Ludo’.
K
(name . Ludovic Courtès)(address . ludo@gnu.org)
87606xoeq3.fsf@posteo.net
ludo@gnu.org (Ludovic Courtès) writes:
Toggle quote (41 lines)
> Amirouche Boubekki <amirouche@hypermove.net> skribis:
>
>> On 2018-02-12 17:59, Leo Famulari wrote:
>>> On Mon, Feb 12, 2018 at 05:43:35PM +0100, Amirouche Boubekki wrote:
>>>> Trying to install bigloo@4.3b leads to a hash mismatch.
>>>>
>>>> This was reproduced by several people.
>>>
>>> Can you copy and paste the error message here?
>> $ guix package -i bigloo@4.3b
>> substitute: mise à jour de la liste des substituts depuis
>> « https://mirror.hydra.gnu.org »... 100.0%
>> guile: warning: failed to install locale
>> warning: failed to install locale: Invalid argument
>>
>> Starting download of
>> /gnu/store/zjpxaz1k3g4dwn26xaic7m1n7i3zfqyr-bigloo4.3b.tar.gz
>> From ftp://ftp-sop.inria.fr/indes/fp/Bigloo/bigloo4.3b.tar.gz...
>> ...3b.tar.gz 35.4MiB 192KiB/s 03:09
>> [####################] 100.0%
>> output path
>> `/gnu/store/zjpxaz1k3g4dwn26xaic7m1n7i3zfqyr-bigloo4.3b.tar.gz' should
>> have sha256 hash
>> `1xpzxjlq5g8j3jrb908kfaaa0pkynk4rd083hzvb08amhy68sx07', instead has
>> `1x7xdgsls277zlf6gcaxs2cj62xj6yvb0qxh0ddmxfamvxba0cf4'
>
> The original tarball should be available at:
>
> https://mirror.hydra.gnu.org/file/bigloo4.3b.tar.gz/sha256/1xpzxjlq5g8j3jrb908kfaaa0pkynk4rd083hzvb08amhy68sx07
>
> … but it’s not.
>
> Kei, could you check if you still have the tarball with this hash and
> how it differs from the current one?
>
> Unfortunately Bigloo’s maintainer tends to overwrite files in place so
> it’s likely that the file was modified after Kei committed the upgrade.
>
> Thanks,
> Ludo’.
I do have the "original" tarball, but I don't know how I can transfer it
to you for inspection (if that is even necessary). However, I have
attached changelog differences between the two source trees. I'd send
the full diffoscope report, but its size is about 127 megabytes! The
difference seems to be a string of miscellaneous fixes and changes.
--- old_bigloo4.3b/ChangeLog 2018-01-29 10:04:09.000000000 -0500
+++ new_bigloo4.3b/ChangeLog 2018-02-09 10:47:03.000000000 -0500
@@ -1,4 +1,120 @@
-2018-01-29 Manuel Serrano <Manuel.Serrano@inria.fr>
+2018-02-09 Manuel Serrano <Manuel.Serrano@inria.fr>
+ Yet-another-Makefile-fix
+ <1763932ff2ff060de51989ce818ab1cd224838f9> [7947f41a]
+
+ Minor-Makefile-fix
+ <d216e4fbfb899dc7a5deee3056880e05743c698a> [a8d85a2b]
+
+ Yet-another-date.scm-fix
+ <44f518d5e6f32999975e509988fa5e3003cab2d7> [98898fda]
+
+2018-02-06 Manuel Serrano <Manuel.Serrano@inria.fr>
+ Makefile-fix
+ <3b11112d0fc135e596d0800d0eee5ab25bfb4b82> [2612fba3]
+
+ Merge
+ <b1136b1dd5de93a9238a950784b6ddaf74c43964> [130abe75]
+
+ Minor-Makefile-fix
+ <79bcb094f32b5a28dc5b0d888968c58a9ab0818b> [6c16c4a4]
+
+ Makefile-fix
+ <98cd49042fc0b830c904d2e4cbf0f9ebe870fddd> [e23e37f6]
+
+ LOGMSG-Tailrec-filter
+ <78328b0df14dcea576dedd2493931f30b5bbe8ce> [5d4d7d7e]
+
+2018-02-05 GitHub <noreply@github.com>
+ Merge-pull-request-3-from-donaldsonjw-4.3b
+ <096570709b0453f5accea0db0c4fc85a6320c8c2> [6637c061]
+
+2018-02-04 Joseph Donaldson <donaldsonjw@yahoo.com>
+ Merge-remote-tracking-branch-upstream-4.3b-into-4.3b
+ <096570709b0453f5accea0db0c4fc85a6320c8c2> [1f770e59]
+
+ Fix-recursive-inlining-optimization
+ <be5eeb0cc2d8cff529383b26bbcbae7f9b3057ff> [190cde8c]
+
+2018-02-03 Joseph Donaldson <donaldsonjw@yahoo.com>
+ Remove-debug-statements
+ <f8044a989c1d4135be0d6cbbb962a390d528235e> [0e9f69ea]
+
+ Enable-jvm-build-of-csv-and-improve-performance-of-csv-parsing
+ <912e710614388beddb539b016a7e4b12824c96d5> [c20fd097]
+
+2018-02-02 GitHub <noreply@github.com>
+ Merge-pull-request-2-from-donaldsonjw-4.3b
+ <1950fc6e3d026c1fd4b2b11df319ba9bb85541ed> [4463d1aa]
+
+2018-01-31 Joseph Donaldson <donaldsonjw@yahoo.com>
+ Support-overlapped-copying-of-normal-vectors
+ <8b277ca36e1166055efb3271a5044950f3cd52b5> [8d412256]
+
+ Patch-JVM-tests-again
+ <8c15efcd72feadcf51c7eb564c700d15c6a54204> [13dc2deb]
+
+ Patch-JVM-tests
+ <69a51e9522d4f343f90a62fea8ecce3cb2348345> [a3d5e940]
+
+ Travis-11
+ <368a55be566a92cb23a2813c3e9ff78ee5d9f2aa> [9e05b800]
+
+ Travis-10
+ <72f3da176d09f0b92f6ac60440ccbf2bacb63427> [9c4c9bb7]
+
+2018-01-30 Manuel Serrano <Manuel.Serrano@inria.fr>
+ Fix-configure-.afile
+ <f87d26f8286933940f2d6a540066191fc10ec851> [5d5cef36]
+
+ Travis-9
+ <974e875adee44378bfd7d9d986570ec5a49744e9> [534a9b35]
+
+ Travis-8
+ <8d8b6885bf8c6bafae0b273870943b513d60add1> [ae821111]
+
+ Travis-7
+ <5715e50963b8b320cbac6d74986abfc78f45807e> [19bc1b2e]
+
+ Travis-6
+ <4e03856d19b4c517ce5796bb572b6d88d5aaf513> [b7c21782]
+
+ Travis-5-disable-gstreamer
+ <f4c48f0034ede2338f740f68d19e3b722621ce1a> [43bff7ff]
+
+ Travis-4-disable-gstreamer
+ <c41c380da4f10ea3972dd8cf7236e983a7bebf95> [3aa55b03]
+
+ Travis-3
+ <ec79fd70cb7a74d46d572cbe081f3acba32acc8f> [d5068355]
+
+ Travis-again
+ <cc15c33b7218907309d8247f36a85ab68e1811b0> [d95c4109]
+
+ Fix-CI-travis-script
+ <e445fed8e9c6d5796a2c87e9d86edd6586d3f7a5> [b7fc56fc]
+
+ Merge-branch-4.3b-of-github.com-manuel-serrano-bigloo-into-4.3b
+ <d1b578f7961fa6c5e9ca7989e1701bda2aeb8982> [0e6fd242]
+
+ Add-CI-travis-support
+ <6b8d3e457a2edf4d6edd4ddfb2a860897340785d> [ce3dad5d]
+
+ Merge-pull-request-1-from-donaldsonjw-4.3b
+ <6857a50306781281c877f800866d567580f47fc2> [8c9067ba]
+
+2018-01-29 Joseph Donaldson <donaldsonjw@yahoo.com>
+ Support-overlapped-copying-of-homogenous-numeric-vectors
+ <2b8d4e4d4b5d77fd358839aa0ad43c411d0f719e> [2c995d42]
+
+ Bootstrap-api-issues-fix-bis
+ <b7e4d8b306d97075eefc6cf45b62a89e877c4aab> [522b4013]
+
+ Bootstrap-api-issues-fix
+ <2f6d4212daed80063209bba9ba0aeb3bfac95317> [37c480d0]
+
+ Fix-bootstrap-procedure
+ <bbc15ed35503bc2ba69395bc89fa97662e19fbaf> [6053df7a]
+
SET-REPL-ERROR-NOTIFIER
<7b0b4f0be4bfbb964f7c6b191a8094fef4c9867a> [3758f93b]
-----BEGIN PGP SIGNATURE-----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=tAX0
-----END PGP SIGNATURE-----
L
(name . Kei Kebreau)(address . kkebreau@posteo.net)
87zi49s41d.fsf@gnu.org
Hello Kei,
Kei Kebreau <kkebreau@posteo.net> skribis:
Toggle quote (2 lines)
> ludo@gnu.org (Ludovic Courtès) writes:
[...]
Toggle quote (21 lines)
>> The original tarball should be available at:
>>
>> https://mirror.hydra.gnu.org/file/bigloo4.3b.tar.gz/sha256/1xpzxjlq5g8j3jrb908kfaaa0pkynk4rd083hzvb08amhy68sx07
>>
>> … but it’s not.
>>
>> Kei, could you check if you still have the tarball with this hash and
>> how it differs from the current one?
>>
>> Unfortunately Bigloo’s maintainer tends to overwrite files in place so
>> it’s likely that the file was modified after Kei committed the upgrade.
>>
>> Thanks,
>> Ludo’.
>
> I do have the "original" tarball, but I don't know how I can transfer it
> to you for inspection (if that is even necessary). However, I have
> attached changelog differences between the two source trees. I'd send
> the full diffoscope report, but its size is about 127 megabytes! The
> difference seems to be a string of miscellaneous fixes and changes.
Yeah, that’s what I expected. :-/ Thanks for checking.
Could you update the hash to the current hash in the ‘bigloo’ package
definition? Please add “Fixes https://bugs.gnu.org/30436.” to the
commit log so people can later see why we changed the hash.
Thank you!
Ludo’.
L
control message for bug #30436
(address . control@debbugs.gnu.org)
877erdqlsb.fsf@gnu.org
severity 30436 minor
K
Re: bug#30436: bigloo@4.3b hash mismatch
(name . Ludovic Courtès)(address . ludo@gnu.org)
871shkogsj.fsf@posteo.net
ludo@gnu.org (Ludovic Courtès) writes:
Toggle quote (39 lines)
> Hello Kei,
>
> Kei Kebreau <kkebreau@posteo.net> skribis:
>
>> ludo@gnu.org (Ludovic Courtès) writes:
>
> [...]
>
>>> The original tarball should be available at:
>>>
>>> https://mirror.hydra.gnu.org/file/bigloo4.3b.tar.gz/sha256/1xpzxjlq5g8j3jrb908kfaaa0pkynk4rd083hzvb08amhy68sx07
>>>
>>> … but it’s not.
>>>
>>> Kei, could you check if you still have the tarball with this hash and
>>> how it differs from the current one?
>>>
>>> Unfortunately Bigloo’s maintainer tends to overwrite files in place so
>>> it’s likely that the file was modified after Kei committed the upgrade.
>>>
>>> Thanks,
>>> Ludo’.
>>
>> I do have the "original" tarball, but I don't know how I can transfer it
>> to you for inspection (if that is even necessary). However, I have
>> attached changelog differences between the two source trees. I'd send
>> the full diffoscope report, but its size is about 127 megabytes! The
>> difference seems to be a string of miscellaneous fixes and changes.
>
> Yeah, that’s what I expected. :-/ Thanks for checking.
>
> Could you update the hash to the current hash in the ‘bigloo’ package
> definition? Please add “Fixes <https://bugs.gnu.org/30436>.” to the
> commit log so people can later see why we changed the hash.
>
> Thank you!
>
> Ludo’.
Done! Thanks to all involved.
-----BEGIN PGP SIGNATURE-----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=97tV
-----END PGP SIGNATURE-----
Closed
?