This is the mail archive of the
gcc-patches@gcc.gnu.org
mailing list for the GCC project.
Re: Verify package integrity of downloaded prerequisites (partially fixes 61439)
- From: Joseph Myers <joseph at codesourcery dot com>
- To: Moritz Klammler <moritz at klammler dot eu>
- Cc: GCC Patches <gcc-patches at gcc dot gnu dot org>
- Date: Wed, 14 Sep 2016 18:10:43 +0000
- Subject: Re: Verify package integrity of downloaded prerequisites (partially fixes 61439)
- Authentication-results: sourceware.org; auth=none
- References: <87mvjajseu.fsf@klammler.eu>
On Wed, 14 Sep 2016, Moritz Klammler wrote:
> Ok, I didn't know about the workflow. Do you think I should dike the
> `--strip-sums` option out again then?
I don't see any use for such an option. Anyone changing the versions
should always have a copy of the new tarball (obtained securely if
possible) and should determine the sums from that.
--
Joseph S. Myers
joseph@codesourcery.com