https://bugs.freedesktop.org/show_bug.cgi?id=87140

Robinson Tryon (qubit) <[email protected]> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|UNCONFIRMED                 |RESOLVED
                 CC|                            |[email protected]
         Resolution|---                         |WORKSFORME

--- Comment #2 from Robinson Tryon (qubit) <[email protected]> ---
(In reply to sancarlosastro from comment #0)
> the sha 256 sum shown on the "info" web page does not match the download,
> but the other checksums do match.  The pgp sig also is valid.
> 

REPRO STEPS:
> on this page:
> http://download.documentfoundation.org/libreoffice/stable/4.3.4/mac/x86/
> LibreOffice_4.3.4_MacOS_x86_sdk.dmg.mirrorlist
> 
> the sha256 sum is listed as:
> f4e9462cfad970ac121283d6a66ee999e14cd99cdbea4a295a3d9f80788cad21

Confirmed: That's what listed there

> The download was retrieved from "the preferred mirror" with url:
> http://download.documentfoundation.org/libreoffice/stable/4.3.4/mac/x86/
> LibreOffice_4.3.4_MacOS_x86_sdk.dmg

Downloaded file using FF 34.0 on Ubuntu 14.04.

> 
> My Mac reports that the checksum is:
> 9e466cdd41ab29e0845267f6e46ed7c6edb79b36b4bcb121edd0df55aee4e53c

The file as downloaded is 33688939 bytes (which matches the webpage).

sha256sum (GNU coreutils) 8.21 applied to the file gives:
f4e9462cfad970ac121283d6a66ee999e14cd99cdbea4a295a3d9f80788cad21

This matches the sha256sum above and on the stated webpage, so NOREPRO for me.

> ... the sha1 and md5 checksums computed by my mac match what is shown on the
> above url.  On addition, the pgp signature also appears to be correct.

SHA-1 and MD5 check out for me as well.

Cryptographically speaking, the chances of finding a file that shares the same
SHA-1 and MD5 hashes with this download but *not* sharing the same sha256 hash
are very low. Crazy low, even. I guess it's possible that there's a bug in one
of the tools we're using to compute the sha256 hashes, but it would be
excitingly weird for us to discover it when testing random LibreOffice binaries
:-)

I'm going to change the Status -> RESOLVED WORKSFORME. Please check the size of
the download and try downloading again. If you still think there's a problem on
the LibreOffice side, please changes status back to UNCONFIRMED.

Thanks!

-- 
You are receiving this mail because:
You are the assignee for the bug.
_______________________________________________
Libreoffice-bugs mailing list
[email protected]
http://lists.freedesktop.org/mailman/listinfo/libreoffice-bugs

Reply via email to