From owner-freebsd-ports-bugs@FreeBSD.ORG Thu Jan 19 18:00:25 2006 Return-Path: X-Original-To: freebsd-ports-bugs@hub.freebsd.org Delivered-To: freebsd-ports-bugs@hub.freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id DBF0616A41F for ; Thu, 19 Jan 2006 18:00:24 +0000 (GMT) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (freefall.freebsd.org [216.136.204.21]) by mx1.FreeBSD.org (Postfix) with ESMTP id 4AFEE43D70 for ; Thu, 19 Jan 2006 18:00:17 +0000 (GMT) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (gnats@localhost [127.0.0.1]) by freefall.freebsd.org (8.13.4/8.13.4) with ESMTP id k0JI0HFb015067 for ; Thu, 19 Jan 2006 18:00:17 GMT (envelope-from gnats@freefall.freebsd.org) Received: (from gnats@localhost) by freefall.freebsd.org (8.13.4/8.13.4/Submit) id k0JI0G4a015061; Thu, 19 Jan 2006 18:00:16 GMT (envelope-from gnats) Resent-Date: Thu, 19 Jan 2006 18:00:16 GMT Resent-Message-Id: <200601191800.k0JI0G4a015061@freefall.freebsd.org> Resent-From: FreeBSD-gnats-submit@FreeBSD.org (GNATS Filer) Resent-To: freebsd-ports-bugs@FreeBSD.org Resent-Reply-To: FreeBSD-gnats-submit@FreeBSD.org, Johan van Selst Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 2F35216A41F for ; Thu, 19 Jan 2006 17:53:09 +0000 (GMT) (envelope-from johans@stack.nl) Received: from mx1.stack.nl (meestal.stack.nl [131.155.140.141]) by mx1.FreeBSD.org (Postfix) with ESMTP id BCDB243D45 for ; Thu, 19 Jan 2006 17:53:08 +0000 (GMT) (envelope-from johans@stack.nl) Received: by mx1.stack.nl (Postfix, from userid 65534) id D02754AE99; Thu, 19 Jan 2006 18:52:31 +0100 (CET) Received: from mud.stack.nl (mud.stack.nl [IPv6:2001:610:1108:5011:207:e9ff:fe14:b498]) by mx1.stack.nl (Postfix) with ESMTP id 5A9A54AE71; Thu, 19 Jan 2006 18:52:31 +0100 (CET) Received: by mud.stack.nl (Postfix, from userid 801) id CB17717017; Thu, 19 Jan 2006 18:53:06 +0100 (CET) Message-Id: <20060119175306.CB17717017@mud.stack.nl> Date: Thu, 19 Jan 2006 18:53:06 +0100 (CET) From: Johan van Selst To: FreeBSD-gnats-submit@FreeBSD.org X-Send-Pr-Version: 3.113 Cc: apeiron+ports@coitusmentis.info Subject: ports/92014: security/p5-Digest-SHA256: Broken on FreeBSD >= 5.x X-BeenThere: freebsd-ports-bugs@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: Johan van Selst List-Id: Ports bug reports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 19 Jan 2006 18:00:25 -0000 >Number: 92014 >Category: ports >Synopsis: security/p5-Digest-SHA256: Broken on FreeBSD >= 5.x >Confidential: no >Severity: non-critical >Priority: low >Responsible: freebsd-ports-bugs >State: open >Quarter: >Keywords: >Date-Required: >Class: update >Submitter-Id: current-users >Arrival-Date: Thu Jan 19 18:00:16 GMT 2006 >Closed-Date: >Last-Modified: >Originator: Johan van Selst >Release: FreeBSD 6.0-STABLE i386 >Organization: >Environment: System: FreeBSD mud.stack.nl 6.0-STABLE FreeBSD 6.0-STABLE #9: Wed Jan 11 14:40:03 CET 2006 johans@mud.stack.nl:/usr/obj/usr/src/sys/mud i386 >Description: [Cc: maintainer] Please disable (or fix) this port for FreeBSD 5.x or later: It produces invalid checksums and should not be used (at least not in a security context) Originally reported by Ben Laurie in http://lists.FreeBSD.org/pipermail/freebsd-ports/2006-January/028552.html >How-To-Repeat: Compare the output of these (similar on 4.x, but not on 5.x): perl -e "use Digest::SHA256; print Digest::SHA256::new(256)->hexhash('test');" echo -n test | sha256 >Fix: I have searched in vain to locate the problem, so my best suggestion is to mark it broken. P.S. While we're at it, add sha256 checksum to distfile - no irony intended. diff -uNr p5-Digest-SHA256/Makefile p5-Digest-SHA256/Makefile --- p5-Digest-SHA256/Makefile Thu May 26 15:10:51 2005 +++ p5-Digest-SHA256/Makefile Thu Jan 19 18:40:43 2006 @@ -24,4 +24,10 @@ MAN3= Digest::SHA256.3 Digest::sha256.3 -.include +.include + +.if ${OSVERSION} >= 500000 +BROKEN= "Produces invalid checksums on >= 5.x" +.endif + +.include diff -uNr p5-Digest-SHA256/distinfo p5-Digest-SHA256/distinfo --- p5-Digest-SHA256/distinfo Thu May 26 15:10:51 2005 +++ p5-Digest-SHA256/distinfo Thu Jan 19 18:51:25 2006 @@ -1,2 +1,3 @@ MD5 (SHA256-0.01b.tar.gz) = 08f2b87bad328275bdebf64c18bfcb31 +SHA256 (SHA256-0.01b.tar.gz) = 72bbb1e31bbfe39e9df930e9b34bbac25e5d1617b7289076945aa303ad03c170 SIZE (SHA256-0.01b.tar.gz) = 9326 >Release-Note: >Audit-Trail: >Unformatted: