So I've reversed the Android Market since the first version -- and along the way have report (and gotten fixed) a bunch of protocol bugs. It definitely performs checks after download - checking the sha sum of the application. More over the package installer definitely verifies that the package and it's contents, have been properly signed.
Now I'm not trying to say your wrong, or just argue with you, just attempting to add some information to the conversation. With that said -- possible some things you could do is check your own package post installation. Does a CRC validate? Are people pushing your application to the SDCard? (Possibly the become corrupt on the push to the sdcard from internal memory?) There are tons of places to fail -- I just know that the market *does* check the download prior to pushing it to the installer. The installer *does* check the integrity of the package. After that, there could be a chance of lots of things failing, but it seems unlikely that it's the market pushing corrupt downloads to the package manager? Like I said previously, not trying to flame bait you, just trying to help with the actual problem. I know official source might not comment on it, so I'm just trying to add from my experience and what I know the market is actually doing :) Tim On Dec 3, 5:05 pm, Brian Conrad <[email protected]> wrote: > On what authority can you say the market checks after download? Did you > work on the Android Market app or did you disassemble it? > > I might also entertain that after downloaded and checked that something > happens during actual install. And then there may be problems with the > particular implementation of the OS on the user's device. After all, on > my phone when it was running 1.5 something as basic the text fields in > the date widget didn't work. After the upgrade to 2.1 they did. > > And I'm certainly not going to spend a lot of time on it if the > uninstall/reinstall solves the problem as it apparently does for other > developers. The apps don't do anything really exotic anyway. Most of > the other bugs with my apps have been due to the bug between the user's > ears. ;-) > > (I'm sure other developers get plenty of those too). > > - Brian > > On 12/03/2011 01:38 PM, strazzere wrote: > > > > > > > > > I don't know? But I can assure you the market check after download and > > after install. Possibly something after that. > > > Is there any pattern in the bug reports? Same device, same rom, etc? > > > I'm sure _something_ is wrong, I'm not doubting you on that. Just > > saying your gripe about the market not checking apks is probably not > > right :) > > > Tim > > > On Dec 2, 3:52 pm, Brian Conrad<[email protected]> wrote: > >> Then why would a few of my users get versions that are corrupted and > >> downloading again solves the problem? > > >> On 12/02/2011 02:26 PM, strazzere wrote: > > >>> Unsure what your problem actually is, but I can assure you that the > >>> Market does actually do this. > >>> Upon download request the give the Market an sha of the application -- > >>> once done download it will check this. If this succeeds it will pass > >>> the apk on to the package manager, which will then verify the > >>> signature of the apk also :) > >>> Tim > >>> On Dec 2, 1:05 pm, Brian Conrad<[email protected]> wrote: > >>>> Apparently the Market app does NO error checking for downloads. Once > >>>> again I had a user complaining my app wasn't working correctly. I > >>>> suggested he uninstall/reinstall and as a last resort he did so and that > >>>> solved the problem. Apparently though the app was corrupted during > >>>> download it still ran. I had another case where the custom font wasn't > >>>> displaying and the uninstall/reinstall solved that for the user. How > >>>> many of you are wasting time chasing down bugs which are really nothing > >>>> more than a corrupted download? Seems to me when a user downloads they > >>>> could first send the MD5sum then after the download see if it matches > >>>> before installation. -- You received this message because you are subscribed to the Google Groups "Android Discuss" group. To post to this group, send email to [email protected]. To unsubscribe from this group, send email to [email protected]. For more options, visit this group at http://groups.google.com/group/android-discuss?hl=en.
