Weird checksum changes

MK-MacPorts at techno.ms MK-MacPorts at techno.ms
Tue Sep 17 14:46:59 PDT 2013


Hi devs,

I was puzzled by the fact that just a few minutes ago I had a weird case of a changing checksum for litecoin's tarball.
When I first checked in the new version on my local machine I had valid three checksums.
Then all three of MacPorts' buildbots
	http://build.macports.org/builders/buildports-mtln-x86_64/builds/8209
	http://build.macports.org/builders/buildports-lion-x86_64/builds/14371
	http://build.macports.org/builders/buildports-snowleopard-x86_64/builds/20719
 complained about a wrong checksum.

	This was really WEIRD!!! (A stealth update on github? Well, there was no incoming commit lately though!!!)

Well, I think that someone/something on github must have changed the tarballs for some reason...

---
$ svn log -l 2
------------------------------------------------------------------------
r111248 | mk at macports.org | 2013-09-17 23:15:41 +0200 (Tue, 17 Sep 2013) | 2 lines

litecoin: revbump with new checksums (needed for some unkown reason)

------------------------------------------------------------------------
r111245 | mk at macports.org | 2013-09-17 22:47:57 +0200 (Tue, 17 Sep 2013) | 2 lines

litecoin: upgrade to latest release version 0.8.5.1

------------------------------------------------------------------------
---




Here is the diff between my original and the next version of checksums for the tarballs:

---
$ svn diff -r111245 Portfile 
Index: Portfile
===================================================================
--- Portfile	(revision 111245)
+++ Portfile	(working copy)
@@ -7,6 +7,7 @@
 PortGroup           github 1.0
 
 github.setup        litecoin-project litecoin 0.8.5.1 v
+revision            1
 
 categories          finance
 maintainers         mk openmaintainer
@@ -35,9 +36,9 @@
                     port:miniupnpc \
                     port:qrencode
 
-checksums           md5     0fa9e6fd044ed62069474f639ebf9826 \
-                    sha1    2a0f1a3c599625ffb6f2172e081e223d8b92cd52 \
-                    rmd160  06a98d159a11450dddb21ab0035d7f5bfe5a5ed5
+checksums           md5     d80dfbc7aa2f8d2e18c60ae50ff8d621 \
+                    sha1    5f4cee4e299bd9e04a50433f05e910d42495dcb1 \
+                    rmd160  b8403288059d2e9025b6f018fc0fc95cf3bd7174
 
 livecheck.type      regex
 livecheck.url       http://litecoin.org
---


Any idea what could have caused this? Does one need to worry?

Unfortunately I do not have the original tarball lingering around anymore. :-( So I can NOT unpack both and compare their contents… :-(

Perhaps one of the mirrors still holds the previous version someplace???

Greets,
Marko


More information about the macports-dev mailing list