[yocto] Fetcher question

[Paul Eggleton]

On Tuesday 30 September 2014 08:53:08 Chris Tapp wrote:
> On 29 Sep 2014, at 22:59, Burton, Ross <ross.burton at intel.com> wrote:
> > On 29 September 2014 22:36, Chris Tapp <opensource at keylevel.com> wrote:
> >> How would the fetcher handle the file changing after it had already been
> >> downloaded and passed a checksum test? Would the change have been
> >> detected?> 
> > The checksum comparison is only done at fetch.
> > https://bugzilla.yoctoproject.org/show_bug.cgi?id=5571 talks about
> > extending that to verify the checksums at do_unpack() to catch
> > situations like this.
> 
> I'm not sure this is quite the same - in this case the (downloaded) file and
> checksum would have matched but the remote file has changed.
> 
> I don't think there's a lot that can be done about this other than try and
> persuade people not to change published files ;-)

Every time an upstream does this we should tell them how much pain it causes 
us. Maybe then they might think twice about doing it.

Cheers,
Paul

-- 

Paul Eggleton
Intel Open Source Technology Centre