Ticket #1348: 0001-Bug-3148-Check-downloaded-files-against-known-good.patch

File 0001-Bug-3148-Check-downloaded-files-against-known-good.patch, 3.1 KB (added by cjb, 9 years ago)
  • trunk/build-scripts/Makefile.linux

    From d5b970c1cdbf250b72b5984f21d38b317208e475 Mon Sep 17 00:00:00 2001
    From: Chris Ball <chris@printf.net>
    Date: Sat, 31 Jul 2010 22:02:31 -0400
    Subject: [PATCH] Bug #3148: Check downloaded files against known-good checksums.
    
    ---
     trunk/build-scripts/Makefile.linux |    5 ++++-
     trunk/build-scripts/Makefile.osx   |    3 +++
     trunk/build-scripts/SHA1SUMS       |    9 +++++++++
     3 files changed, 16 insertions(+), 1 deletions(-)
     create mode 100644 trunk/build-scripts/SHA1SUMS
    
    diff --git a/trunk/build-scripts/Makefile.linux b/trunk/build-scripts/Makefile.linux
    index 6601396..999fff8 100644
    a b ARCH_TYPE=$(shell uname -m) 
    3636
    3737## Location of directory for source unpacking
    3838FETCH_DIR=/tmp
     39BUILDSCRIPT_DIR=$(PWD)
    3940## Location of directory for prefix/destdir/compiles/etc
    4041BUILT_DIR=$(FETCH_DIR)/built
    4142TBB_FINAL=$(BUILT_DIR)/TBBL
    NOSCRIPT_VER=1.9.9.80 
    4950OPENSSL_VER=0.9.8l
    5051OTR_VER=3.2.0
    5152PIDGIN_VER=2.6.4
    52 POLIPO_VER=1.0.4.1
     53POLIPO_VER=1.0.4
    5354QT_VER=4.6.2
    5455TOR_VER=0.2.2.14-alpha
    5556TORBUTTON_VER=1.2.5
    fetch-source: 
    9495        $(WGET) --directory-prefix=$(FETCH_DIR) $(POLIPO_URL)
    9596        $(WGET) --directory-prefix=$(FETCH_DIR) $(PIDGIN_URL)
    9697        $(WGET) --directory-prefix=$(FETCH_DIR) $(FIREFOX_URL)
     98        echo "Verifying integrity of downloaded files.."
     99        pushd $(FETCH_DIR) && sha1sum -c $(BUILDSCRIPT_DIR)/SHA1SUMS; popd
    97100
    98101unpack-source:
    99102        cd $(FETCH_DIR) && tar -xvzf $(ZLIB_PACKAGE)
  • trunk/build-scripts/Makefile.osx

    diff --git a/trunk/build-scripts/Makefile.osx b/trunk/build-scripts/Makefile.osx
    index 6e43e67..b5fc44a 100644
    a b ARCH_TYPE=$(shell uname -m) 
    3636
    3737## Location of directory for source unpacking
    3838FETCH_DIR=/build
     39BUILDSCRIPT_DIR=$(PWD)
    3940## Location of directory for prefix/destdir/compiles/etc
    4041BUILT_DIR=$(FETCH_DIR)/built
    4142TBB_FINAL=$(BUILT_DIR)/TBBL
    fetch-source: 
    9091        $(WGET) --directory-prefix=$(FETCH_DIR) $(POLIPO_URL)
    9192        $(WGET) --directory-prefix=$(FETCH_DIR) $(PIDGIN_URL)
    9293        $(WGET) --directory-prefix=$(FETCH_DIR) $(FIREFOX_URL)
     94        echo "Verifying integrity of downloaded files.."
     95        pushd $(FETCH_DIR) && shasum -c $(BUILDSCRIPT_DIR)/SHA1SUMS; popd
    9396
    9497unpack-source:
    9598        cd $(FETCH_DIR) && tar -xvzf $(ZLIB_PACKAGE)
  • new file trunk/build-scripts/SHA1SUMS

    diff --git a/trunk/build-scripts/SHA1SUMS b/trunk/build-scripts/SHA1SUMS
    new file mode 100644
    index 0000000..b411be6
    - +  
     142647740b7bf63a906af8f2c2558a7c13ea3967e  firefox-3.5.10.tar.bz2
     2b0c4e9801b74f8bed1502353674288a5e4f1ca16  libevent-1.4.13-stable.tar.gz
     3d3fb6ec89532ab40646b65af179bb1770f7ca28f  openssl-0.9.8l.tar.gz
     41b67a5bef64d0bbe9576b3b2c9356df276cc5e6c  pidgin-2.6.4.tar.bz2
     5ba562906d125a6bf72dc36c2d078147d40cf8722  polipo-1.0.4.tar.gz
     6977c10b88a2230e96868edc78a9e3789c0fcbf70  qt-everywhere-opensource-src-4.6.2.tar.gz
     75f542072c367592e94ae171b3f94e8078d801626  tor-0.2.2.14-alpha.tar.gz
     8cf65dc982b97365664f66fe7c2d265342156cf37  vidalia-0.2.9.tar.gz
     960faeaaf250642db5c0ea36cd6dcc9f99c8f3902  zlib-1.2.3.tar.gz