[MacPorts] #22524: MacVim-7.2.snapshot50 checksum fails

[MacPorts]

#22524: MacVim-7.2.snapshot50 checksum fails
---------------------------------+------------------------------------------
  Reporter:  srinath@…           |       Owner:  raimue@…           
      Type:  defect              |      Status:  closed             
  Priority:  Normal              |   Milestone:                     
 Component:  ports               |     Version:  1.8.1              
Resolution:  fixed               |    Keywords:                     
      Port:  MacVim              |  
---------------------------------+------------------------------------------

Comment(by kuperman@…):

 Replying to [comment:6 macsforever2000@…]:
 > You have to wait up to an hour for the changes to sync. It should work
 for you now.

 So, I just selfupdated and synced and got

 {{{
 --->  Computing dependencies for MacVim
 --->  Fetching MacVim
 --->  Attempting to fetch MacVim-7.2.snapshot50.zip from
 http://distfiles.macports.org/MacVim
 --->  Attempting to fetch MacVim-7.2.snapshot50.zip from
 http://arn.se.distfiles.macports.org/MacVim
 --->  Verifying checksum(s) for MacVim
 Error: Checksum (md5) mismatch for MacVim-7.2.snapshot50.zip
 Error: Checksum (sha1) mismatch for MacVim-7.2.snapshot50.zip
 Error: Checksum (rmd160) mismatch for MacVim-7.2.snapshot50.zip
 Error: Target org.macports.checksum returned: Unable to verify file
 checksums
 Error: Status 1 encountered during processing.
 }}}

 and with detail

 {{{
 --->  Verifying checksum(s) for MacVim
 DEBUG: Executing org.macports.checksum (MacVim)
 --->  Checksumming MacVim-7.2.snapshot50.zip
 Error: Checksum (md5) mismatch for MacVim-7.2.snapshot50.zip
 Portfile checksum: MacVim-7.2.snapshot50.zip md5
 0d103997373b27241543cdd8cb69d10e
 Distfile checksum: MacVim-7.2.snapshot50.zip md5
 ac2bde597bc455e9bbdc13a582647a2d
 Error: Checksum (sha1) mismatch for MacVim-7.2.snapshot50.zip
 Portfile checksum: MacVim-7.2.snapshot50.zip sha1
 762dbdef01f64c60b733aa9c3a824c94b8c2a6dc
 Distfile checksum: MacVim-7.2.snapshot50.zip sha1
 c58fe52d162e53dcd125180a0138748c3e2d0195
 Error: Checksum (rmd160) mismatch for MacVim-7.2.snapshot50.zip
 Portfile checksum: MacVim-7.2.snapshot50.zip rmd160
 fd8a1223bc7954b67a7de9898b810227909799b2
 Distfile checksum: MacVim-7.2.snapshot50.zip rmd160
 8c5fe73de7e0580312d313c3f0bc478fd4b2d5b0
 The correct checksum line may be:
 checksums           md5     ac2bde597bc455e9bbdc13a582647a2d \
                     sha1    c58fe52d162e53dcd125180a0138748c3e2d0195 \
                     rmd160  8c5fe73de7e0580312d313c3f0bc478fd4b2d5b0
 Error: Target org.macports.checksum returned: Unable to verify file
 checksums
 }}}

 The original report shows that the download was from "repo.or.cz" and mine
 was from "arn.se.distfiles.macports.org".  After manually downloading both
 of these, I can confirm that they have differing checksums.  I can't track
 down the source of the checksum mismatch other than the differing file
 sizes (possibly due to different compression ratios?).

 {{{
 %  ls -l */*MacVim*.zip
 -rw-r--r--  1 kuperman  wheel  14983213 Oct 11 04:38
 arn.se.distfiles.macports.org/MacVim-7.2.snapshot50.zip
 -rw-r--r--  1 kuperman  wheel  13195383 Nov 16 10:56
 repo.or.cz/MacVim-7.2.snapshot50.zip
 }}}

 "diff -r" of the unpacked zip reports no changes, "ls -laR" has no
 differing files or timestamps, and a find/md5 of all the files contained
 within also reports no changes.  If I unzip, tar up the results, send them
 through xxd, and then diff I get the attached file listing difference,
 none of which appear malicious to me (but I don't know enough about the
 structure of tar files to say  for certain).

 Summing up, it looks like there are two slightly different version of the
 zipfile out there, so some folks are going to encounter checksum problems
 either way.  Is there a way to force it to try a particular repository
 first?

-- 
Ticket URL: <http://trac.macports.org/ticket/22524#comment:7>
MacPorts <http://www.macports.org/>
Ports system for Mac OS