Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 2 Jan 2018 21:32:18 -0800
From:      Kevin Oberman <rkoberman@gmail.com>
To:        Mike Clarke <jmc-freebsd2@milibyte.co.uk>
Cc:        FreeBSD Ports ML <freebsd-ports@freebsd.org>
Subject:   Re: lang/ghc -8.0.2_2 mismatched checksums
Message-ID:  <CAN6yY1svErbynZfqoS5iR9zyCpdH2G8VEJ9_uzTKuNB4gU3X9Q@mail.gmail.com>
In-Reply-To: <20180102124249.5e26334e@curlew>
References:  <20180102124249.5e26334e@curlew>

next in thread | previous in thread | raw e-mail | index | archive | help
On Tue, Jan 2, 2018 at 4:42 AM, Mike Clarke <jmc-freebsd2@milibyte.co.uk>
wrote:

>
> My daily periodic security run comes up with with these errors:
>
> Checking for packages with mismatched checksums:
> ghc-8.0.2_2: /usr/local/bin/haddock
> ghc-8.0.2_2: /usr/local/lib/ghc-8.0.2/package.conf.d/package.cache
> ghc-8.0.2_2: /usr/local/share/doc/ghc-8.0.2/html/libraries/doc-index-33.h
> tml
> ghc-8.0.2_2: /usr/local/share/doc/ghc-8.0.2/html/libraries/doc-index-36.h
> tml
> ghc-8.0.2_2: /usr/local/share/doc/ghc-8.0.2/html/libraries/doc-index-43.h
> tml
> ghc-8.0.2_2: /usr/local/share/doc/ghc-8.0.2/html/libraries/doc-index-46.h
> tml
> ghc-8.0.2_2: /usr/local/share/doc/ghc-8.0.2/html/libraries/doc-index-58.h
> tml
> ghc-8.0.2_2: /usr/local/share/doc/ghc-8.0.2/html/libraries/doc-index-60.h
> tml
> ghc-8.0.2_2: /usr/local/share/doc/ghc-8.0.2/html/libraries/doc-index-61.h
> tml
> ghc-8.0.2_2: /usr/local/share/doc/ghc-8.0.2/html/libraries/doc-index-62.h
> tml
> ghc-8.0.2_2: /usr/local/share/doc/ghc-8.0.2/html/libraries/doc-index-92.h
> tml
> ghc-8.0.2_2: /usr/local/share/doc/ghc-8.0.2/html/libraries/doc-index-A.ht
> ml
> ghc-8.0.2_2: /usr/local/share/doc/ghc-8.0.2/html/libraries/doc-index-All.
> html
> ghc-8.0.2_2: /usr/local/share/doc/ghc-8.0.2/html/libraries/doc-index-B.ht
> ml
> ghc-8.0.2_2: /usr/local/share/doc/ghc-8.0.2/html/libraries/doc-index-C.ht
> ml
> ghc-8.0.2_2: /usr/local/share/doc/ghc-8.0.2/html/libraries/doc-index-D.ht
> ml
> ghc-8.0.2_2: /usr/local/share/doc/ghc-8.0.2/html/libraries/doc-index-E.ht
> ml
> ghc-8.0.2_2: /usr/local/share/doc/ghc-8.0.2/html/libraries/doc-index-F.ht
> ml
> ghc-8.0.2_2: /usr/local/share/doc/ghc-8.0.2/html/libraries/doc-index-G.ht
> ml
> ghc-8.0.2_2: /usr/local/share/doc/ghc-8.0.2/html/libraries/doc-index-H.ht
> ml
> ghc-8.0.2_2: /usr/local/share/doc/ghc-8.0.2/html/libraries/doc-index-I.ht
> ml
> ghc-8.0.2_2: /usr/local/share/doc/ghc-8.0.2/html/libraries/doc-index-J.ht
> ml
> ghc-8.0.2_2: /usr/local/share/doc/ghc-8.0.2/html/libraries/doc-index-K.ht
> ml
> ghc-8.0.2_2: /usr/local/share/doc/ghc-8.0.2/html/libraries/doc-index-L.ht
> ml
> ghc-8.0.2_2: /usr/local/share/doc/ghc-8.0.2/html/libraries/doc-index-M.ht
> ml
> ghc-8.0.2_2: /usr/local/share/doc/ghc-8.0.2/html/libraries/doc-index-N.ht
> ml
> ghc-8.0.2_2: /usr/local/share/doc/ghc-8.0.2/html/libraries/doc-index-O.ht
> ml
> ghc-8.0.2_2: /usr/local/share/doc/ghc-8.0.2/html/libraries/doc-index-P.ht
> ml
> ghc-8.0.2_2: /usr/local/share/doc/ghc-8.0.2/html/libraries/doc-index-Q.ht
> ml
> ghc-8.0.2_2: /usr/local/share/doc/ghc-8.0.2/html/libraries/doc-index-R.ht
> ml
> ghc-8.0.2_2: /usr/local/share/doc/ghc-8.0.2/html/libraries/doc-index-S.ht
> ml
> ghc-8.0.2_2: /usr/local/share/doc/ghc-8.0.2/html/libraries/doc-index-T.ht
> ml
> ghc-8.0.2_2: /usr/local/share/doc/ghc-8.0.2/html/libraries/doc-index-U.ht
> ml
> ghc-8.0.2_2: /usr/local/share/doc/ghc-8.0.2/html/libraries/doc-index-V.ht
> ml
> ghc-8.0.2_2: /usr/local/share/doc/ghc-8.0.2/html/libraries/doc-index-W.ht
> ml
> ghc-8.0.2_2: /usr/local/share/doc/ghc-8.0.2/html/libraries/doc-index-Y.ht
> ml
> ghc-8.0.2_2: /usr/local/share/doc/ghc-8.0.2/html/libraries/doc-index-Z.ht
> ml
> ghc-8.0.2_2: /usr/local/share/doc/ghc-8.0.2/html/libraries/index.html
>
> -- End of security output --
>
> I've reinstalled the package but still get the errors.
>
> curlew:/home/mike% pkg info  ghc
> ghc-8.0.2_2
> Name           : ghc
> Version        : 8.0.2_2
> Installed on   : Mon Jan  1 09:35:19 2018 GMT
> Origin         : lang/ghc
> Architecture   : FreeBSD:11:amd64
> Prefix         : /usr/local
> Categories     : haskell lang
> Licenses       : BSD3CLAUSE
> Maintainer     : haskell@FreeBSD.org
> WWW            : http://www.haskell.org/ghc/
> Comment        : Compiler for the functional language Haskell
> Options        :
>         BOOT           : off
>         BOOTH          : off
>         DOCS           : on
>         DYNAMIC        : on
>         PROFILE        : on
> Shared Libs required:
>         libgmp.so.10
>         libiconv.so.2
>         libcharset.so.1
> Shared Libs provided:
>         libHSrts_thr-ghc8.0.2.so
>         libHSrts-ghc8.0.2.so
>         libHSfilepath-1.4.1.1-ghc8.0.2.so
>         libHSghc-boot-th-8.0.2-ghc8.0.2.so
>         libffi.so.6
>         libHSghc-prim-0.5.0.0-ghc8.0.2.so
>         libHSCabal-1.24.2.0-ghc8.0.2.so
>         libHSrts_thr_debug-ghc8.0.2.so
>         libHSrts_debug-ghc8.0.2.so
>         libHSpretty-1.1.3.3-ghc8.0.2.so
>         libHSarray-0.5.1.1-ghc8.0.2.so
>         libHStransformers-0.5.2.0-ghc8.0.2.so
>         libHShoopl-3.10.2.1-ghc8.0.2.so
>         libHShpc-0.6.0.3-ghc8.0.2.so
>         libHSghc-boot-8.0.2-ghc8.0.2.so
>         libHStemplate-haskell-2.11.1.0-ghc8.0.2.so
>         libHSghc-8.0.2-ghc8.0.2.so
>         libHSbinary-0.8.3.0-ghc8.0.2.so
>         libHSghci-8.0.2-ghc8.0.2.so
>         libHSdirectory-1.3.0.0-ghc8.0.2.so
>         libHShaskeline-0.7.3.0-ghc8.0.2.so
>         libHSunix-2.7.2.1-ghc8.0.2.so
>         libHStime-1.6.0.1-ghc8.0.2.so
>         libHSrts_l-ghc8.0.2.so
>         libHSprocess-1.4.3.0-ghc8.0.2.so
>         libHSbytestring-0.10.8.1-ghc8.0.2.so
>         libHSrts_thr_l-ghc8.0.2.so
>         libHSdeepseq-1.4.2.0-ghc8.0.2.so
>         libHSinteger-gmp-1.0.0.1-ghc8.0.2.so
>         libHScontainers-0.5.7.1-ghc8.0.2.so
>         libHSterminfo-0.4.0.2-ghc8.0.2.so
>         libHSbase-4.9.1.0-ghc8.0.2.so
>         libHSxhtml-3000.2.1-ghc8.0.2.so
> Annotations    :
>         repo_type      : binary
>         repository     : FreeBSD
> Flat size      : 1.18GiB
> Description    :
> The Glasgow Haskell Compiler is a state-of-the-art, open source, compiler
> and
> interactive environment for the functional language Haskell.  Highlights:
>
>  * Supports the entire Haskell 2010 language plus a wide variety of
>    extensions.
>  * Has particularly good support for concurrency and parallelism, including
>    support for Software Transactional Memory (STM).
>  * Generates fast code, particularly for concurrent programs.
>  * Works on several platforms including FreeBSD, Windows, Mac, Linux, most
>    varieties of Unix, and several different processor architectures.
>  * Has extensive optimisation capabilities, including inter-module
> optimisation.
>  * Compiles Haskell code either directly to native code or using LLVM as a
>    back-end.  It can also generate C code as an intermediate target for
> porting
>    to new platforms.  The interactive environment compiles Haskell to
> bytecode,
>    and supports execution of mixed bytecode/compiled programs.
>  * Profiling is supported, both by time/allocation and various kinds of
> heap
>    profiling.
>  * Comes with several libraries, and thousands more are available on
> Hackage.
>
> WWW: http://www.haskell.org/ghc/
>
> --
> Mike Clarke
>

I've seen this on some fonts where the font.dir and font.scale files are
modified by another program after installation. I'm guessing that that some
other program is touching those HTML files after the checksums are
generated and saved in the DB.

N.B. I don't use haskell or understand how the haskell environment works,
so this is just a guess based on the font case.
--
Kevin Oberman, Part time kid herder and retired Network Engineer
E-mail: rkoberman@gmail.com
PGP Fingerprint: D03FB98AFA78E3B78C1694B318AB39EF1B055683



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?CAN6yY1svErbynZfqoS5iR9zyCpdH2G8VEJ9_uzTKuNB4gU3X9Q>