search

wisk / medusa

An open source interactive disassembler
Other
1.04k stars 92 forks source link

Hash mismatch #75

Open fcafra opened 6 years ago

fcafra commented 6 years ago

Hi,

-- SHA1 hash of /root/.hunter/_Base/Download/OGDF/snapshot-2015-12-04/fb9b5d9/snapshot-2015-12-04.tar.gz does not match expected value expected: 'fb9b5d93fd27feae91799c5a52805e10c139b22e' actual: '0a55144b31d165f4b3009693cb9089c6b8930c88' -- Hash mismatch, removing...

On Kali 2.0

Tinei commented 6 years ago

Same issue on Debian Stretch ! Good evening

xgRTHKk4 commented 6 years ago

Using src='https://github.com/wisk/ogdf/archive/snapshot-2015-12-04.tar.gz' Why? Perhaps indeed your build system is a bit wacky. And it also doesn't feel secure at all, who can control all these sources you put there. How about suggesting an option to use: 'git submodule update --init --recursive' in your build system in case configure cannot find a needed item. Then we get it all straight from the required projects themselves. Ofcourse no guarantee that it will work, but now it certainly doesn't. I would suggest to use your current build system as a recommended 'failsafe' option in case getting it straight from the projects doesn't work. Should also shorten build time a lot and save a lot of diskspace.

Ybalrid commented 6 years ago

I can confirm the same problem. Happens when cmake uses hunter to retreive OGDF sources

-- verifying file...
       file='/home/ybalrid/.hunter/_Base/Download/OGDF/snapshot-2015-12-04/fb9b5d9/snapshot-2015-12-04.tar.gz'
-- SHA1 hash of
    /home/ybalrid/.hunter/_Base/Download/OGDF/snapshot-2015-12-04/fb9b5d9/snapshot-2015-12-04.tar.gz
  does not match expected value
    expected: 'fb9b5d93fd27feae91799c5a52805e10c139b22e'
      actual: '0a55144b31d165f4b3009693cb9089c6b8930c88'
-- Hash mismatch, removing...
wisk commented 6 years ago

Hello everyone,

Sorry for the delay. The build with hunter is broken since long time. I can't afford to spend time to maintain a particular branch of hunter anymore. However Medusa will soon rely on vcpkg to handle dependencies. It should make things easier.