>Number:         27071
>Category:       pkg
>Synopsis:       several of the files needed by gmplayer are missing or have bad checksums
>Confidential:   no
>Severity:       non-critical
>Priority:       medium
>Responsible:    pkg-manager
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Wed Sep 29 02:56:00 UTC 2004
>Closed-Date:
>Last-Modified:
>Originator:     Steven M. Bellovin
>Release:        NetBSD 2.0G
>Organization:
	
>Environment:
	
	
System: NetBSD raccoon.machshav.com 2.0G NetBSD 2.0G (GENERIC) #0: Fri Sep 17 22:42:05 EDT 2004 smb@chadash.machshav.com:/usr/BUILD/obj/sys/arch/i386/compile/GENERIC i386
Architecture: i386
Machine: i386
>Description:
	The pkgsrc info for gmplayer is wrong.  There are checksum problems:
	lintpkgsrc -orm
	Scanning distinfo: ......................................... (4599 packages)
	checksum mismatches
	mplayer-1.0rc5/AlienMind-1.2.tar.bz2 (SHA1)
	mplayer-1.0rc5/BlueHeart-1.5.tar.bz2 (SHA1)
	mplayer-1.0rc5/CornerMP-1.2.tar.bz2 (SHA1)
	mplayer-1.0rc5/CornerMP-aqua-1.4.tar.bz2 (SHA1)
	mplayer-1.0rc5/Cyrus-1.2.tar.bz2 (SHA1)
	mplayer-1.0rc5/MidnightLove-1.6.tar.bz2 (SHA1)
	mplayer-1.0rc5/avifile-1.6.tar.bz2 (SHA1)
	mplayer-1.0rc5/gnome-1.1.tar.bz2 (SHA1)
	mplayer-1.0rc5/hayraphon-1.0.tar.bz2 (SHA1)
	mplayer-1.0rc5/hwswskin-1.1.tar.bz2 (SHA1)
	mplayer-1.0rc5/mentalic-1.2.tar.bz2 (SHA1)
	mplayer-1.0rc5/neutron-1.5.tar.bz2 (SHA1)
	mplayer-1.0rc5/phony-1.1.tar.bz2 (SHA1)
	mplayer-1.0rc5/plastic-1.2.tar.bz2 (SHA1)
	mplayer-1.0rc5/proton-1.2.tar.bz2 (SHA1)
	mplayer-1.0rc5/slim-1.2.tar.bz2 (SHA1)
	mplayer-1.0rc5/xanim-1.6.tar.bz2 (SHA1)
	mplayer-1.0rc5/xine-lcd-1.2.tar.bz2 (SHA1)
`
	(this was reproducible after a 'make fetch'; the bad files came from
	both http://www.mplayerhq.hu and ftp://ftp.lug.udel.edu)
	Additionally, it could not find default-1.8.tar.bz2 or
	WindowsMediaPlayer6-2.0.tar.bz2 on any site.
>How-To-Repeat:
	cvs update -P -d; make install
>Fix:
	I found the missing files on dist.momonga-linux.org.  At least
	one of the bad files (AlienMind) had the proper SHA1 checksum there.
	For lack of time, I didn't try retrieving the other bad files from
	that site.
>Release-Note:
>Audit-Trail:
>Unformatted: