package/ufs-utils: fix hash file
Fix the following error: wget -nd -t 3 --connect-timeout=10 -O '/home/dario/projects/buildroot/output/build/.ufs-utils-7.14.12.tar.gz.68J1WJ/output' 'https://github.com/SanDisk-Open-Source/ufs-utils/archive/v7.14.12/ufs-utils-7.14.12.tar.gz' --2025-08-07 11:07:32-- https://github.com/SanDisk-Open-Source/ufs-utils/archive/v7.14.12/ufs-utils-7.14.12.tar.gz Resolving github.com (github.com)... 140.82.121.4 Connecting to github.com (github.com)|140.82.121.4|:443... connected. HTTP request sent, awaiting response... 302 Found Location: https://codeload.github.com/SanDisk-Open-Source/ufs-utils/tar.gz/refs/tags/v7.14.12 [following] --2025-08-07 11:07:32-- https://codeload.github.com/SanDisk-Open-Source/ufs-utils/tar.gz/refs/tags/v7.14.12 Resolving codeload.github.com (codeload.github.com)... 140.82.121.10 Connecting to codeload.github.com (codeload.github.com)|140.82.121.10|:443... connected. HTTP request sent, awaiting response... 200 OK Length: unspecified [application/x-gzip] Saving to: ‘/home/dario/projects/buildroot/output/build/.ufs-utils-7.14.12.tar.gz.68J1WJ/output’ /home/dario/projects/buildroot/output/b [ <=> ] 77.76K --.-KB/s in 0.06s 2025-08-07 11:07:32 (1.32 MB/s) - ‘/home/dario/projects/buildroot/output/build/.ufs-utils-7.14.12.tar.gz.68J1WJ/output’ saved [79623] ERROR: while checking hashes from package/ufs-utils/ufs-utils.hash ERROR: ufs-utils-7.14.12.tar.gz has wrong sha256 hash: ERROR: expected: 96cd578722830bc7d8a418d528a3067c0b80ad437f66c3333ebc238fe52436a2 ERROR: got : 96d15ce4b0990049d812d24afc2a62240c1a4aa534ea6aebb5aebd34dccb2dac ERROR: Incomplete download, or man-in-the-middle (MITM) attack wget -nd -t 3 --connect-timeout=10 -O '/home/dario/projects/buildroot/output/build/.ufs-utils-7.14.12.tar.gz.HYpqKm/output' 'https://sources.buildroot.net/ufs-utils/ufs-utils-7.14.12.tar.gz' --2025-08-07 11:07:32-- https://sources.buildroot.net/ufs-utils/ufs-utils-7.14.12.tar.gz Resolving sources.buildroot.net (sources.buildroot.net)... 2606:4700:20::681a:25, 2606:4700:20::ac43:4838, 2606:4700:20::681a:125, ... Connecting to sources.buildroot.net (sources.buildroot.net)|2606:4700:20::681a:25|:443... connected. HTTP request sent, awaiting response... 200 OK Length: 79619 (78K) [application/x-gtar-compressed] Saving to: ‘/home/dario/projects/buildroot/output/build/.ufs-utils-7.14.12.tar.gz.HYpqKm/output’ /home/dario/projects/buildroot/output/b 100%[===================================================================================>] 77.75K --.-KB/s in 0.02s 2025-08-07 11:07:33 (4.96 MB/s) - ‘/home/dario/projects/buildroot/output/build/.ufs-utils-7.14.12.tar.gz.HYpqKm/output’ saved [79619/79619] ufs-utils-7.14.12.tar.gz: OK (sha256: 96cd578722830bc7d8a418d528a3067c0b80ad437f66c3333ebc238fe52436a2) Looking at: https://sources.buildroot.net/ufs-utils/ufs-utils-7.14.12.tar.gz with hash: sha256 96cd578722830bc7d8a418d528a3067c0b80ad437f66c3333ebc238fe52436a2 ufs-utils-7.14.12.tar.gz and: https://github.com/SanDisk-Open-Source/ufs-utils/archive/v7.14.12/ufs-utils-7.14.12.tar.gz with hash: sha256 96d15ce4b0990049d812d24afc2a62240c1a4aa534ea6aebb5aebd34dccb2dac ufs-utils-7.14.12.tar.gz and running diffoscope utility on those two archives, it points to the upstream commit: https://github.com/SanDisk-Open-Source/ufs-utils/commit/989dcd297223d6896c5892532d14984326fa093d The file dates are also different inside the tar file. On Julien’s suggestion, I opened a ticket [1] to highlight the issue and inform the ufs-utils maintainers about the problem. [1] https://github.com/SanDisk-Open-Source/ufs-utils/issues/76 Fixes: https://autobuild.buildroot.org/results/b69/b69472d2eaf27dfcc97c300b96868cab52068ce9 https://autobuild.buildroot.org/results/429/429a28669d98c6f424f33a211eb0ebb48c6f4553 https://autobuild.buildroot.org/results/01b/01b90bd7d78a34ae732191b750efc69f195c78ec https://autobuild.buildroot.org/results/a09/a097e48314be2f522238880e9ab4529cebeff47b Co-Developed-by:Julien Olivain <ju.o@free.fr> Signed-off-by:
Dario Binacchi <dario.binacchi@amarulasolutions.com> Signed-off-by:
Peter Korsgaard <peter@korsgaard.com>
Loading
Please register or sign in to comment