[Rpm-maint] [rpm-software-management/rpm] RPM_BIN_TYPE get wrong length if HEADERIMPORT_FAST is used (#398)

[Jeff Johnson]

@pmatilai: au contraire, the MD5 of the original package is the only "universal" (in the sense of being present all the way back to RPM2) precomputed  identifier for a *.rpm package if/when converted to a UUIDv3 (see the query format issue) to be (eventually) used as a database key rather than a cryptographic verification.

IIUC, you might want to check the MD5 tag count when retrieved from the signature header before being appended to the metadata header stored in an rpmdb. The root cause and best fix may be earlier in the retrieval.

The RPM5 issue was quite obscure, is/was triggered by padding in a signature header when mandatory  elliptic curve signatures were added, changing the tag content of a signature header. I'll dig out the one line change when I get a chance.



-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/rpm-software-management/rpm/issues/398#issuecomment-366998156
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.rpm.org/pipermail/rpm-maint/attachments/20180220/c0c10a07/attachment.html>