From owner-freebsd-ports-bugs@FreeBSD.ORG Tue Jan 14 17:20:01 2014 Return-Path: Delivered-To: freebsd-ports-bugs@smarthost.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 61F843C1 for ; Tue, 14 Jan 2014 17:20:01 +0000 (UTC) Received: from freefall.freebsd.org (freefall.freebsd.org [IPv6:2001:1900:2254:206c::16:87]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mx1.freebsd.org (Postfix) with ESMTPS id 4C69A1AFA for ; Tue, 14 Jan 2014 17:20:01 +0000 (UTC) Received: from freefall.freebsd.org (localhost [127.0.0.1]) by freefall.freebsd.org (8.14.7/8.14.7) with ESMTP id s0EHK0kI040251 for ; Tue, 14 Jan 2014 17:20:00 GMT (envelope-from gnats@freefall.freebsd.org) Received: (from gnats@localhost) by freefall.freebsd.org (8.14.7/8.14.7/Submit) id s0EHK0QJ040250; Tue, 14 Jan 2014 17:20:00 GMT (envelope-from gnats) Date: Tue, 14 Jan 2014 17:20:00 GMT Message-Id: <201401141720.s0EHK0QJ040250@freefall.freebsd.org> To: freebsd-ports-bugs@FreeBSD.org Cc: From: =?utf-8?Q?Dag-Erling_Sm=C3=B8rgrav?= Subject: Re: ports/185739 X-BeenThere: freebsd-ports-bugs@freebsd.org X-Mailman-Version: 2.1.17 Precedence: list Reply-To: =?utf-8?Q?Dag-Erling_Sm=C3=B8rgrav?= List-Id: Ports bug reports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 14 Jan 2014 17:20:01 -0000 The following reply was made to PR ports/185739; it has been noted by GNATS. From: =?utf-8?Q?Dag-Erling_Sm=C3=B8rgrav?= To: freebsd-gnats-submit@freebsd.org Cc: Subject: Re: ports/185739 Date: Tue, 14 Jan 2014 18:11:30 +0100 =3D> Attempting to fetch http://builds.piwik.org/piwik-2.0.3.tar.gz fetch: http://builds.piwik.org/piwik-2.0.3.tar.gz: size mismatch: expected = 7287646, actual 7287497 The distinfo from your patch is SHA256 (piwik-2.0.3.tar.gz) =3D 03b7cb5ef571e40c831d1682b4010c7f64d62138a37= 3745c47b942225e80eca6 SIZE (piwik-2.0.3.tar.gz) =3D 7287646 whereas I get SHA256 (piwik-2.0.3.tar.gz) =3D 87f6b56701ff57d1ccaaacf0caaddbd03104ab7c85d= 6e8700d9e224b44e8b9dc SIZE (piwik-2.0.3.tar.gz) =3D 7287497 Could you confirm that the change is benign, i.e. not causes by someone inserting a trojan into the distribution tarball? (and while you're there, tell the upstream devs to never ever reroll a tarball without bumping the version number) DES --=20 Dag-Erling Sm=C3=B8rgrav - des@des.no