On Wed, Apr 13, 2022 at 8:02 AM Ralph Siemsen <[email protected]> wrote:
>
> On Wed, Apr 13, 2022 at 12:41 PM Mike Crowe <[email protected]> wrote:
> >
> > I believe that Ralph's reproduction of the test failure without the zlib
> > patch was from a complete rebuild without anything coming from the sstate
> > cache.
>
> Yes, just confirming the above. I wanted to be certain there was
> nothing left-over from a previous build, so I nuked everything except
> for downloads and my local.conf.
>
> I am quite certain the problem is with apt-ftparchive command, which
> is what generates the md5/sha sums in the Release file. It seems to
> behave differently under Fedora versus Ubuntu. Only the SHA256 is
> affected. It is worth noting that apt includes its own sha calculation
> code, they are not calling out to "sha256sum" or using an existing
> library.

Yes, and it appears they had a quite similar bug in the past!

https://lists.debian.org/deity/2006/07/msg00074.html

Bug#378183: apt: All SHA256 hashes generated/used by APT are wrong"

Steve


> Was busy with some other things this AM but am going to dive into
> apt-ftparchive source code next (which is C++, ugh...).
>
> Ralph
-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.
View/Reply Online (#164357): 
https://lists.openembedded.org/g/openembedded-core/message/164357
Mute This Topic: https://lists.openembedded.org/mt/90107518/21656
Group Owner: [email protected]
Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub 
[[email protected]]
-=-=-=-=-=-=-=-=-=-=-=-

Reply via email to