https://gcc.gnu.org/bugzilla/show_bug.cgi?id=61439
Bug ID: 61439 Summary: contrib/download_prerequisites script does not verify integrity of packages Product: gcc Version: unknown Status: UNCONFIRMED Severity: normal Priority: P3 Component: other Assignee: unassigned at gcc dot gnu.org Reporter: jim at garrison dot cc The InstallingGCC page on the wiki recommends the use of the contrib/download_prerequisites script for fetching gcc's dependencies. However, the script fails to check the integrity of the downloaded files. Since it downloads specific versions of packages, perhaps it would be best to check against the known hash of each tarball.