pkg/44101: net/couriertcpd distfile checksum error

[kre%munnari.OZ.AU@localhost]

>Number:         44101
>Category:       pkg
>Synopsis:       net/couriertcpd distfile checksum error
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    pkg-manager
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Wed Nov 17 04:25:00 +0000 2010
>Originator:     Robert Elz
>Release:        NetBSD 5.1_RC3 (irrelevant, but:) pkgsrc current 2010-11-17
>Organization:
        Prince of Songkla University
>Environment:
System: NetBSD jade.coe.psu.ac.th 5.1_RC3 NetBSD 5.1_RC3 (JADE-1.12-20100614) 
#2: Mon Jun 14 08:35:26 ICT 2010 
kre%jade.coe.psu.ac.th@localhost:/usr/obj/5.1/kernels/JADE i386
Architecture: i386
Machine: i386
>Description:
        The distinfo on the master site for net/couriertcpd

http://biznetnetworks.dl.sourceforge.net/project/courier/courier/0.65.1/
courier-0.65.1.tar.bz2

        (split onto two lines to keep line length reasonable)
        does not match the checksum in the distfile.

        The copy of the distfile on f.n.o appears to be the same as
        the one available on the master site.

        Since the mod time on the file fetched is Oct 5, and the
        mod time on the last update to the pkgsrc directories is
        Oct 16, my guess is that the pkgsrc update was prepared using
        an older version of the distfile, and no-one noticed that the
        master site changed it (even before we needed it).

>How-To-Repeat:
        mv aside any old (apparently OK) distfile (don't delete it).

        cd ..../pkgsrc/net/couriertcpd
        make checksum

        Notice that it downloads 7108548 bytes rather than the 7152680
        that the distinfo file expects, and that the checksum comparison
        (naturally) fails.

>Fix:
        Someone who has the distfile that was used to prepare the pkgsrc
        update needs to check and see what is different in that version
        of the distfile compared to what is now on offer.  If the
        differences are acceptable, update the distinfo file to match.
        Otherwise, put a copy of the distfile we should be using on
        f.n.o and rmeove the master site from the makefile.

        In the former (more likely) case, I don't think a DIST_SUBDIR
        is needed in this case, as it appears that it would have been
        impossible for pkgsrc to have ever fetched the old distfile
        version.

        On the other hand, if we are supposed to go and fetch the old
        distfile, then it will need to go in a DIST_SUBDIR.