>Number:         23501
>Category:       pkg
>Synopsis:       pkgsrc/graphics/MesaLib distinfo changed
>Confidential:   no
>Severity:       critical
>Priority:       medium
>Responsible:    pkg-manager
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Thu Nov 20 04:50:00 UTC 2003
>Closed-Date:
>Last-Modified:
>Originator:     gabriel rosenkoetter
>Release:        NetBSD 1.6K
>Organization:
	
>Environment:
System: NetBSD grappa 1.6K NetBSD 1.6K (GRAPPA-$Revision: 1.533 $) #3: Tue Jan 21 22:32:43 EST 2003 gr@grappa:/new/src/netbsd/src/sys/arch/i386/compile/GRAPPA i386
Architecture: i386
Machine: i386
>Description:
Apparently, pkgsrc/graphics/MesaLib was altered to grab
MesaLib-5.0.2.tar.bz2 straight into pkgsrc/distfiles (rather than
pkgsrc/distfiles/Mesa-5.0.2) without updating distinfo.

The SHA1 sum for the file does, in fact, appear to be different, but
from all I can tell the MesaLib-5.0.2.tar.bz2 I've got is authentic.
You may want to double-check the checksum in the provided patch just
to be safe.
>How-To-Repeat:
cd pkgsrc/graphics/MesaLib && make
>Fix:
--- distinfo.orig	Wed Nov 19 23:44:50 2003
+++ distinfo	Wed Nov 19 23:45:11 2003
@@ -1,7 +1,7 @@
 $NetBSD: distinfo,v 1.15 2003/11/18 16:10:55 jschauma Exp $
 
-SHA1 (Mesa-5.0.2/MesaLib-5.0.2.tar.bz2) = a49234ad74d6c67b2727c1dd8a8c8e1ed7f63192
-Size (Mesa-5.0.2/MesaLib-5.0.2.tar.bz2) = 1719544 bytes
+SHA1 (MesaLib-5.0.2.tar.bz2) = a49234ad74d6c67b2727c1dd8a8c8e1ed7f63192
+Size (MesaLib-5.0.2.tar.bz2) = 1719544 bytes
 SHA1 (patch-aa) = 7fa63dca0edfc41812b5432cbabd861ec52cec33
 SHA1 (patch-ac) = 723c70827840465f3b7f07e0852107ddcdc0c0c1
 SHA1 (patch-ad) = 807b07b1505735f23dd4148c8c838df08af6333e
>Release-Note:
>Audit-Trail:
>Unformatted: