This is the mail archive of the
gcc-bugs@gcc.gnu.org
mailing list for the GCC project.
[Bug other/61439] New: contrib/download_prerequisites script does not verify integrity of packages
- From: "jim at garrison dot cc" <gcc-bugzilla at gcc dot gnu dot org>
- To: gcc-bugs at gcc dot gnu dot org
- Date: Sat, 07 Jun 2014 06:35:29 +0000
- Subject: [Bug other/61439] New: contrib/download_prerequisites script does not verify integrity of packages
- Auto-submitted: auto-generated
https://gcc.gnu.org/bugzilla/show_bug.cgi?id=61439
Bug ID: 61439
Summary: contrib/download_prerequisites script does not verify
integrity of packages
Product: gcc
Version: unknown
Status: UNCONFIRMED
Severity: normal
Priority: P3
Component: other
Assignee: unassigned at gcc dot gnu.org
Reporter: jim at garrison dot cc
The InstallingGCC page on the wiki recommends the use of the
contrib/download_prerequisites script for fetching gcc's dependencies.
However, the script fails to check the integrity of the downloaded files.
Since it downloads specific versions of packages, perhaps it would be best to
check against the known hash of each tarball.