RTEMS5 checksum failure file: sources/jpegsrc.v9a

[Chris Johns]

On 2/2/21 4:36 am, Gedare Bloom wrote:
> Indeed. It seems the sha512 has changed. The file doesn't appear to be different
> on the http server. I found a copy
> at https://download.videolan.org/contrib/jpeg/
> <https://download.videolan.org/contrib/jpeg/> that has a matching sha512sum as
> we expect in the RSB. 

RSB matching version is:

https://ftp.rtems.org/pub/rtems/releases/5/5.1/sources/jpegsrc.v9a.tar.gz

Releases copy in the sources to protect against this. Please consider a ticket
and patch for the RSB for the 5 branch as OK given ...

> I compared those two tar files, and found this:
> 
> --rw-r--r-- 1 gedare gedare   4807 May  2  2010 makejvcx.v10
> --rw-r--r-- 1 gedare gedare   3595 May  2  2010 makecvcx.v10
> --rw-r--r-- 1 gedare gedare   3595 May  2  2010 makedvcx.v10
> --rw-r--r-- 1 gedare gedare   2876 May  2  2010 makervcx.v10
> --rw-r--r-- 1 gedare gedare   3535 May  2  2010 maketvcx.v10
> --rw-r--r-- 1 gedare gedare   2876 May  2  2010 makewvcx.v10
> --rw-r--r-- 1 gedare gedare   2288 May  2  2010 makecfil.v10
> --rw-r--r-- 1 gedare gedare   2288 May  2  2010 makedfil.v10
> --rw-r--r-- 1 gedare gedare   1142 May  2  2010 makerfil.v10
> --rw-r--r-- 1 gedare gedare   2123 May  2  2010 maketfil.v10
> --rw-r--r-- 1 gedare gedare   1142 May  2  2010 makewfil.v10
> --rw-r--r-- 1 gedare gedare   1859 May  1  2010 makeasln.v10
> --rw-r--r-- 1 gedare gedare    679 May  1  2010 makejsln.v10
> --rw-r--r-- 1 gedare gedare   5789 May  1  2010 makejfil.v10
> +-rw-r--r-- 1 gedare gedare   4804 May  2  2010 makejvcx.v10
> +-rw-r--r-- 1 gedare gedare   3592 May  2  2010 makecvcx.v10
> +-rw-r--r-- 1 gedare gedare   3592 May  2  2010 makedvcx.v10
> +-rw-r--r-- 1 gedare gedare   2873 May  2  2010 makervcx.v10
> +-rw-r--r-- 1 gedare gedare   3532 May  2  2010 maketvcx.v10
> +-rw-r--r-- 1 gedare gedare   2873 May  2  2010 makewvcx.v10
> +-rw-r--r-- 1 gedare gedare   2285 May  2  2010 makecfil.v10
> +-rw-r--r-- 1 gedare gedare   2285 May  2  2010 makedfil.v10
> +-rw-r--r-- 1 gedare gedare   1139 May  2  2010 makerfil.v10
> +-rw-r--r-- 1 gedare gedare   2120 May  2  2010 maketfil.v10
> +-rw-r--r-- 1 gedare gedare   1139 May  2  2010 makewfil.v10
> +-rw-r--r-- 1 gedare gedare   1856 May  1  2010 makeasln.v10
> +-rw-r--r-- 1 gedare gedare    676 May  1  2010 makejsln.v10
> +-rw-r--r-- 1 gedare gedare   5786 May  1  2010 makejfil.v10
> 
> It appears that someone has removed some unicode characters or similar ( <8b>¯¨
> ) from the file header line
> +<?xml version="1.0" encoding="utf-8"?>
> of all these .v10 files in the ijg.org <http://ijg.org> download, without
> somehow modifying the file metadata.

Thanks
Chris