pkg/42330: databases/gnats distinfo file missing distfile checksum(s) ...

[kre%munnari.OZ.AU@localhost]

>Number:         42330
>Category:       pkg
>Synopsis:       databases/gnats distinfo file missing distfile checksum(s) ...
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    pkg-manager
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Mon Nov 16 09:35:00 +0000 2009
>Originator:     Robert Elz
>Release:        NetBSD 4.0 / i386 (irrelevant)
>Organization:
        Prince of Songkla University
>Environment:
System: NetBSD jade.coe.psu.ac.th 4.0_STABLE NetBSD 4.0_STABLE 
(JADE-1.696-20080517) #9: Fri May 23 18:55:13 ICT 2008 
kre%jade.coe.psu.ac.th@localhost:/usr/obj/4/kernels/JADE i386
Architecture: i386
Machine: i386
>Description:
        The last commit to databases/gnats updated the distinfo
        file (nothing unusual there, and seeing it in the log would
        not raise any red flags), but the update, instead of (perhaps)
        updating a checksum to account for an altered distflie or patch,
        instead just deleted the checksum (and size) lines for the distfile.

>How-To-Repeat:
        The easy way is ...

                
http://cvsweb.netbsd.org/bsdweb.cgi/pkgsrc/databases/gnats/distinfo.diff?r1=1.8&r2=1.9

        Expect to see ...


CS file: /ftp/cvs/cvsroot/pkgsrc/databases/gnats/distinfo,v
retrieving revision 1.8
retrieving revision 1.9
diff -u -p -r1.8 -r1.9
--- pkgsrc/databases/gnats/distinfo     2005/08/28 12:36:42     1.8
+++ pkgsrc/databases/gnats/distinfo     2009/10/08 12:50:32     1.9
@@ -1,10 +1,8 @@
-$NetBSD: distinfo,v 1.8 2005/08/28 12:36:42 recht Exp $
+$NetBSD: distinfo,v 1.9 2009/10/08 12:50:32 hauke Exp $
 
 -SHA1 (gnats-4.1.0.tar.gz) = 7f8ce7fbb7594698c5ba71421cad3cbc7e079003
 -RMD160 (gnats-4.1.0.tar.gz) = b16bfa3ffa4f1c7dc351d1c5639061c358c64afd
 -Size (gnats-4.1.0.tar.gz) = 1221364 bytes
  SHA1 (patch-aa) = 46ee888dd1726d7c7178247dd8c11c3bc8790911
  SHA1 (patch-ab) = 605e0caaed659405fff46af6c610d52c9dca948e
  SHA1 (patch-ac) = f6fdd1c2353961d47bd0e58866b56ac6f0d6173a
  SHA1 (patch-ad) = ffacd88288036eb74eccd6687292c5a456e2f027
  SHA1 (patch-ae) = ff99ebd3f6d2d1aa75b32ead56db0082eeb69753
 +SHA1 (patch-ah) = 0923289389f0e8c8e7f01a57ef8c2ecb1238bc5f

        In that we see that patch-ah was added, and an xsum for it (fine),
        but deleting the first 3 lines was not intended, I expect.

>Fix:
        # for someone who has the distfile ...

        cd ..../pkgsrc/databases/gnats
        make distinfo

        # if you don't, revert the above change, and make it
        # again, correctly...