Bug 16482

The tarball for gcc-arm-none-eabi-10.3-2021.10-x86_64-linux.tar.bz2 hosted on the source mirror fails integrity checks.

1. Expected Checksums
- MD5: 2383e4eb4ea23f248d33adc70dc3227e
- SHA256: 97dbb4f019ad1650b732faffcc881689cedc14e2b7ee863d390e0a41ef16c9a3

2. Actual Checksums (of the downloaded file)
- MD5: 3cb31499f7f833ae970c3210fd907fba
- SHA256: c1d9dbf71e84d737a0e38fbf33c8f7f8b24519ee8b75a472af1873fd84769f8c

3. Error / Steps to Reproduce
Download the archive and test it:

$ wget http://downloads.yoctoproject.org/mirror/sources/gcc-arm-none-eabi-10.3-2021.10-x86_64-linux.tar.bz2
--2026-11-02 19:41:42--  http://downloads.yoctoproject.org/mirror/sources/gcc-arm-none-eabi-10.3-2021.10-x86_64-linux.tar.bz2
Connecting to 127.0.0.1:3128... connected.
Proxy request sent, awaiting response... 200 OK
Length: 107036672 (102M) [application/octet-stream]
Saving to: ‘gcc-arm-none-eabi-10.3-2021.10-x86_64-linux.tar.bz2’

gcc-arm-none-eabi-10.3-2021.10-x86_64- 100%[===========================================================================>] 102,08M   592KB/s    in 2m 40s

2026-11-02 19:44:22 (654 KB/s) - ‘gcc-arm-none-eabi-10.3-2021.10-x86_64-linux.tar.bz2’ saved [107036672/107036672]

$ bunzip2 -t gcc-arm-none-eabi-10.3-2021.10-x86_64-linux.tar.bz2
bunzip2: gcc-arm-none-eabi-10.3-2021.10-x86_64-linux.tar.bz2: file ends unexpectedly
[...]

When comparing file sizes, it seems the hosted mirror is truncated:
-upstream / original: 150 MB (https://developer.arm.com/-/media/Files/downloads/gnu-rm/10.3-2021.10/gcc-arm-none-eabi-10.3-2021.10-x86_64-linux.tar.bz2)
-mirror: 102 MB

4. Impact
Any recipe's do_fetch falling back on the Yocto source mirror would result in a checksum error.