[Pkg-dia-team] Bug#364293: dia-common_0.94.0-7sarge3_all.deb is corrupted/incomplete?

[Jeroen van Wolffelaar]

severity 364293 serious
thanks

On Sat, Apr 22, 2006 at 09:46:07AM -0400, Patrick Bernier wrote:
> Package: dia-common
> Version: 0.94.0-7sarge3
> Tags: sarge
> 
> First, debsums reported a checksum mismatch in dia-common on
> /usr/share/doc/dia-common/changelog.gz . Indeed, the end of the file looks like
> garbage from a corrupted or incomplete gzip stream. I tried downloading another
> copy of dia-common_0.94.0-7sarge3_all.deb manually, verified its md5sum against
> the one stated in the distribution file (which matched, so it's not a download
> problem), and indeed it looks like the archive is incomplete:
> 
> % md5sum dia-common_0.94.0-7sarge3_all.deb
> 00c9a9808842eaef293bdd0d15b40105  dia-common_0.94.0-7sarge3_all.deb
> % grep -B 2 00c9a9808842eaef293bdd0d15b40105 /var/lib/dpkg/available
> Filename: pool/main/d/dia/dia-common_0.94.0-7sarge3_all.deb
> Size: 2149752
> MD5sum: 00c9a9808842eaef293bdd0d15b40105
> % ar x dia-common_0.94.0-7sarge3_all.deb
> % tar -zxf dia-common_0.94.0-7sarge3_all.deb
> 
> gzip: stdin: not in gzip format
> tar: Child returned status 1
> tar: Error exit delayed from previous errors
> %

Actually, untarring a .deb is not expected to work at all. But the
package is broken indeed:

[jeroen at spohr]/org/ftp.debian.org/ftp/pool/main/d/dia$ ar p
dia-common_0.94.0-7sarge3_all.deb data.tar.gz|zcat > /dev/null

zcat: stdin: invalid compressed data--crc error
[jeroen at spohr]/org/ftp.debian.org/ftp/pool/main/d/dia$

So something is corrupted there (at least the changelog according to the
reporter), and IMHO the package should be rebuilt -- and the original
build environment checked.

On a sidenote, it's curious that dak didn't check for this.

--Jeroen

-- 
Jeroen van Wolffelaar
Jeroen at wolffelaar.nl (also for Jabber & MSN; ICQ: 33944357)
http://Jeroen.A-Eskwadraat.nl