Bug 16482 - Corrupt source archive hosted on downloads.yoctoproject.org mirror
Summary: Corrupt source archive hosted on downloads.yoctoproject.org mirror
Status: RESOLVED FIXED
Alias: None
Product: Infrastructure General
Classification: Infrastructure
Component: infrastructure-general (show other bugs)
Version: unspecified
Hardware: x86 x86_64
: Undecided normal
Target Milestone: ---
Assignee: Michael Halstead
QA Contact:
URL: http://downloads.yoctoproject.org/mir...
Whiteboard:
Depends on:
Blocks:
 
Reported: 2026-11-02 18:01 UTC by Horia Geantă
Modified: 2026-11-02 19:25 UTC (History)
0 users

See Also:
OS type for building Yocto: ---
Type of Regression: ---
Verified:
Documentation change: No (bug/feature does not impact docs)


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Horia Geantă 2026-11-02 18:01:33 UTC
The tarball for gcc-arm-none-eabi-10.3-2021.10-x86_64-linux.tar.bz2 hosted on the source mirror fails integrity checks.

1. Expected Checksums
- MD5: 2383e4eb4ea23f248d33adc70dc3227e
- SHA256: 97dbb4f019ad1650b732faffcc881689cedc14e2b7ee863d390e0a41ef16c9a3

2. Actual Checksums (of the downloaded file)
- MD5: 3cb31499f7f833ae970c3210fd907fba
- SHA256: c1d9dbf71e84d737a0e38fbf33c8f7f8b24519ee8b75a472af1873fd84769f8c

3. Error / Steps to Reproduce
Download the archive and test it:

$ wget http://downloads.yoctoproject.org/mirror/sources/gcc-arm-none-eabi-10.3-2021.10-x86_64-linux.tar.bz2
--2026-11-02 19:41:42--  http://downloads.yoctoproject.org/mirror/sources/gcc-arm-none-eabi-10.3-2021.10-x86_64-linux.tar.bz2
Connecting to 127.0.0.1:3128... connected.
Proxy request sent, awaiting response... 200 OK
Length: 107036672 (102M) [application/octet-stream]
Saving to: ‘gcc-arm-none-eabi-10.3-2021.10-x86_64-linux.tar.bz2’

gcc-arm-none-eabi-10.3-2021.10-x86_64- 100%[===========================================================================>] 102,08M   592KB/s    in 2m 40s

2026-11-02 19:44:22 (654 KB/s) - ‘gcc-arm-none-eabi-10.3-2021.10-x86_64-linux.tar.bz2’ saved [107036672/107036672]

$ bunzip2 -t gcc-arm-none-eabi-10.3-2021.10-x86_64-linux.tar.bz2
bunzip2: gcc-arm-none-eabi-10.3-2021.10-x86_64-linux.tar.bz2: file ends unexpectedly
[...]

When comparing file sizes, it seems the hosted mirror is truncated:
-upstream / original: 150 MB (https://developer.arm.com/-/media/Files/downloads/gnu-rm/10.3-2021.10/gcc-arm-none-eabi-10.3-2021.10-x86_64-linux.tar.bz2)
-mirror: 102 MB

4. Impact
Any recipe's do_fetch falling back on the Yocto source mirror would result in a checksum error.
Comment 1 Michael Halstead 2026-11-02 19:25:07 UTC
Thank you for the report. The intact file is now in place.