ToME: the Tales of Maj'Eyal

Everything about ToME
https://forums.te4.org/

Checksum of 1.4.9 sources tarball changed

https://forums.te4.org/viewtopic.php?f=69&t=47073

Page 1 of 1

Checksum of 1.4.9 sources tarball changed

Posted: Fri Dec 23, 2016 8:20 am
by rapenne-s
Hello,

It seems that the checksum of this file changed in the last week or last 2 weeks=> http://te4.org/dl/t-engine/t-engine4-src-1.4.9.tar.bz2

SHA512 (t-engine4-src-1.4.9.tar.bz2-new) = 0d527f18f9844c38478f71829d4944c3221aa0817f52ab4f44aed5990493a769e206228b367dad413bc9f111be9404db8e9e6b6f9f0e0c821ffc27c721ccc1da
SHA512 (t-engine4-src-1.4.9.tar.bz2-old) = f604fe2e65cafb17f173c69f84af292dbd7dd8d74f43947fec3a6ced749d1c1973453ceb2f83e75025a2447b7e0bd6d822801cdfedacffa6680625b4f8ba0999

$ diff -ru t-engine4-src-1.4.9-old t-engine4-src-1.4.9-new/
Binary files t-engine4-src-1.4.9-old/game/engines/te4-1.4.9.teae and t-engine4-src-1.4.9-new/game/engines/te4-1.4.9.teae differ
Binary files t-engine4-src-1.4.9-old/game/modules/boot-te4-1.4.9.team and t-engine4-src-1.4.9-new/game/modules/boot-te4-1.4.9.team differ
Binary files t-engine4-src-1.4.9-old/game/modules/tome-1.4.9-gfx.team and t-engine4-src-1.4.9-new/game/modules/tome-1.4.9-gfx.team differ
Binary files t-engine4-src-1.4.9-old/game/modules/tome-1.4.9-music.team and t-engine4-src-1.4.9-new/game/modules/tome-1.4.9-music.team differ
Binary files t-engine4-src-1.4.9-old/game/modules/tome-1.4.9.team and t-engine4-src-1.4.9-new/game/modules/tome-1.4.9.team differ
Is it something normal ? Does it happen often ?

Re: Checksum of 1.4.9 sources tarball changed

Posted: Sun Dec 25, 2016 9:42 pm
by darkgod
Yeah it's normal, I did a rebuild to fix a few rare binaries issues and my script also auto repacks the source.
And no it does not happen often :=)

Re: Checksum of 1.4.9 sources tarball changed

Posted: Sun Dec 25, 2016 9:46 pm
by rapenne-s
darkgod wrote:Yeah it's normal, I did a rebuild to fix a few rare binaries issues and my script also auto repacks the source.
And no it does not happen often :=)
Thanks for you reply.

Is there any way to know that this kind of update occurs ? On OpenBSD and FreeBSD ports system we rely on the checksum of the upstream tarball when the packager update the package, to ensure its integrity. When this kind of update happens, we could think that ToME has been compromised for example.

Re: Checksum of 1.4.9 sources tarball changed

Posted: Tue Dec 27, 2016 8:50 am
by darkgod
Oh I see, if I have to do that again I'll try to remember to post about it then :=)
All times are UTC
Page 1 of 1

Powered by phpBB® Forum Software © phpBB Limited