cvs commit: ports/Tools/scripts distinfochecker

[Peter Jeremy]

On Wed, 2006-Jan-25 18:38:40 -0500, Kris Kennaway wrote:
>AFAIK duplicate checksums are OK - they are useful if e.g. mirrors
>have different versions of the distfile that are functionally
>identical.  Duplicate SIZE causes errors though (arguably a bug).

Different, but functionally identical, versions of a distfile are
highly likely to also have different sizes.  If you're going to allow
different checksums, you need to allow for different sizes as well.

Doing this without opening potential security holes means changing the
distfiles entries to be tuples of {filename,size,md5,shd-256} (where
anything except the filename is optional).  A downloaded file would
have to completely match one of the tuples for it to be acceptable.

How many cases are there where there are multiple, equivalent,
versions of distfiles on the net?

-- 
Peter Jeremy