NetBSD Problem Report #60302

From www@netbsd.org  Sat May 30 15:29:41 2026
Return-Path: <www@netbsd.org>
Received: from mail.netbsd.org (mail.netbsd.org [199.233.217.200])
	(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)
	 key-exchange X25519 server-signature RSA-PSS (2048 bits)
	 client-signature RSA-PSS (2048 bits))
	(Client CN "mail.netbsd.org", Issuer "R13" (not verified))
	by mollari.NetBSD.org (Postfix) with ESMTPS id 310841A923B
	for <gnats-bugs@gnats.NetBSD.org>; Sat, 30 May 2026 15:29:41 +0000 (UTC)
Message-Id: <20260530152940.2DB9F1A923C@mollari.NetBSD.org>
Date: Sat, 30 May 2026 15:29:40 +0000 (UTC)
From: coypu@sdf.org
Reply-To: coypu@sdf.org
To: gnats-bugs@NetBSD.org
Subject: evbarm-aarch64 checksum is of the wrong files
X-Send-Pr-Version: www-1.0
X-From4GNATS: "coypu@sdf.org via gnats" <gnats-admin@NetBSD.org>

>Number:         60302
>Category:       port-evbmips
>Synopsis:       evbarm-aarch64 checksum is of the wrong files
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    port-evbmips-maintainer
>State:          closed
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Sat May 30 15:30:00 +0000 2026
>Closed-Date:    Sat May 30 22:05:03 +0000 2026
>Last-Modified:  Thu Oct 08 19:00:03 +0000 2026
>Originator:     coypu
>Release:        NetBSD 11.0 RC4
>Organization:
>Environment:
Not yet installed.
>Description:
I downloaded https://cdn.netbsd.org/pub/NetBSD/NetBSD-11.0_RC4/evbarm-aarch64/binary/gzimg/arm64.img.gz and wanted to confirm the checksum, so I looked at the SHA512 file:
https://cdn.netbsd.org/pub/NetBSD/NetBSD-11.0_RC4/evbarm-aarch64/binary/gzimg/SHA512

The contents of it is:

SHA512 (arm64mbr.img) = 3dbc8bf14e3b560a51cc77436fe4a7f90e9492aef8e0bf8937246fe8c78641a7c3e4a21c69dff7a6aaef14c6e3ebf0f4725b1279fb6ce7b9fb498df49a776bef

So:
1. The file I downloaded is missing from SHA512
2. The checksum is for the non-gz file?
>How-To-Repeat:

>Fix:

>Release-Note:

>Audit-Trail:
From: "David H. Gutteridge" <david@gutteridge.ca>
To: Gnats Bugs <gnats-bugs@netbsd.org>
Cc: 
Subject: Re: port-evbmips/60302: evbarm-aarch64 checksum is of the wrong files
Date: Sat, 30 May 2026 12:24:44 -0400

 I think this is effectively a duplicate of PR install/59195. I
 mentioned these particular issues here:

 https://mail-index.netbsd.org/netbsd-bugs/2025/04/03/msg088095.html

 Dave


State-Changed-From-To: open->closed
State-Changed-By: maya@NetBSD.org
State-Changed-When: Sat, 30 May 2026 22:05:03 +0000
State-Changed-Why:
duplicate 59195


From: "Brook Milligan" <brook@netbsd.org>
To: gnats-bugs@gnats.NetBSD.org
Cc: 
Subject: PR/60302 CVS commit: src
Date: Sun, 2 Aug 2026 02:59:15 +0000

 Module Name:	src
 Committed By:	brook
 Date:		Sun Aug  2 02:59:14 UTC 2026

 Modified Files:
 	src/distrib/utils/embedded: mkimage
 	src/etc: Makefile
 	src/etc/etc.evbarm: Makefile.inc
 	src/etc/etc.evbmips: Makefile.inc
 	src/etc/etc.evbppc: Makefile.inc
 	src/etc/etc.riscv: Makefile.inc

 Log Message:
 PR install/59195 and PR port-evbmips/60302: fix hashes in gzimg directories

 Hashes in gzimg directories for some ports either correspond to the
 wrong (i.e., uncompressed) files or do not cover all files.  These
 problems are described in PR install/59195 and PR port-evbmips/60302,
 respectively.  The potential solution offered for PR 59195 does not
 work if multiple image files exist in a single gzimg directory.

 The correct solution involves three aspects: (i) make checksums
 independently of mkimage, which allows a common list of hashes in
 etc/Makefile, (ii) for directories producing more than one compressed
 image, make checksums in individual temporary files, one per
 compressed image, to combine at the end, and (iii) add make targets to
 allow parallelism across multiple images within each directory.

 This patch implements those steps for the evbarm, evbmips, evbppc, and
 riscv ports, which were the only ones previously using mkimage for
 checksums.


 To generate a diff of this commit:
 cvs rdiff -u -r1.97 -r1.98 src/distrib/utils/embedded/mkimage
 cvs rdiff -u -r1.477 -r1.478 src/etc/Makefile
 cvs rdiff -u -r1.139 -r1.140 src/etc/etc.evbarm/Makefile.inc
 cvs rdiff -u -r1.32 -r1.33 src/etc/etc.evbmips/Makefile.inc
 cvs rdiff -u -r1.22 -r1.23 src/etc/etc.evbppc/Makefile.inc
 cvs rdiff -u -r1.7 -r1.8 src/etc/etc.riscv/Makefile.inc

 Please note that diffs are not public domain; they are subject to the
 copyright notices on the relevant files.

From: "Martin Husemann" <martin@netbsd.org>
To: gnats-bugs@gnats.NetBSD.org
Cc: 
Subject: PR/60302 CVS commit: [netbsd-11] src
Date: Thu, 8 Oct 2026 18:56:27 +0000

 Module Name:	src
 Committed By:	martin
 Date:		Thu Oct  8 18:56:27 UTC 2026

 Modified Files:
 	src/distrib/utils/embedded [netbsd-11]: mkimage
 	src/etc [netbsd-11]: Makefile
 	src/etc/etc.evbarm [netbsd-11]: Makefile.inc
 	src/etc/etc.evbmips [netbsd-11]: Makefile.inc
 	src/etc/etc.evbppc [netbsd-11]: Makefile.inc
 	src/etc/etc.riscv [netbsd-11]: Makefile.inc

 Log Message:
 Pull up following revision(s) (requested by gutteridge in ticket #511):

 	etc/etc.riscv/Makefile.inc: revision 1.8
 	etc/etc.evbarm/Makefile.inc: revision 1.140
 	etc/etc.evbarm/Makefile.inc: revision 1.141
 	etc/etc.evbarm/Makefile.inc: revision 1.142
 	etc/etc.evbarm/Makefile.inc: revision 1.145
 	etc/etc.evbppc/Makefile.inc: revision 1.23
 	etc/etc.evbmips/Makefile.inc: revision 1.33
 	etc/etc.evbarm/Makefile.inc: revision 1.139
 	etc/Makefile: revision 1.478
 	distrib/utils/embedded/mkimage: revision 1.98

 Generate hashes for bootable images in gzimg directory.

 At one point this should probably be unified at least a bit with the hash
 generation of regular sets, so that there is a single place that defines
 the types of hashes generated for sets and gzimg.

 PR install/59195 and PR port-evbmips/60302: fix hashes in gzimg directories

 Hashes in gzimg directories for some ports either correspond to the
 wrong (i.e., uncompressed) files or do not cover all files.  These
 problems are described in PR install/59195 and PR port-evbmips/60302,
 respectively.  The potential solution offered for PR 59195 does not
 work if multiple image files exist in a single gzimg directory.

 The correct solution involves three aspects: (i) make checksums
 independently of mkimage, which allows a common list of hashes in
 etc/Makefile, (ii) for directories producing more than one compressed
 image, make checksums in individual temporary files, one per
 compressed image, to combine at the end, and (iii) add make targets to
 allow parallelism across multiple images within each directory.

 This patch implements those steps for the evbarm, evbmips, evbppc, and
 riscv ports, which were the only ones previously using mkimage for
 checksums.

 Do not try to make image hashes if we created no images

 Fix indent.

 etc/etc.evbarm/Makefile.inc: follow-on hash generation fix

 Revs. 141 & 142 introduced a guard that tried to prevent checksum
 consolidation from running in contexts where there's nothing to process
 -- that is, images aren't created at all. However, it then also
 prevented clean builds that do include images from consolidating their
 checksums as intended, since the "exists" check that was added reflects
 too early a file system state on clean builds ("gzimg" doesn't exist
 yet). It also didn't address the fact that there can be targets that
 do in fact create and populate a "gzimg" directory, yet don't actually
 generate any images as presently construed/defined are relevant for
 hash generation, as happens with the evbearmv4-el arch.

 Another fix for PR install/59195. Tested with earmv5hf (no images, no
 "gzimg" directory created), evbearmv4-el (no images, "gzimg" directory
 is created), and aarch64 (images and "gzimg" directory are created),
 with clean builds into new directory structures and subsequent update
 builds tested for each arch.


 To generate a diff of this commit:
 cvs rdiff -u -r1.92 -r1.92.2.1 src/distrib/utils/embedded/mkimage
 cvs rdiff -u -r1.475.2.2 -r1.475.2.3 src/etc/Makefile
 cvs rdiff -u -r1.136 -r1.136.2.1 src/etc/etc.evbarm/Makefile.inc
 cvs rdiff -u -r1.32 -r1.32.2.1 src/etc/etc.evbmips/Makefile.inc
 cvs rdiff -u -r1.19.2.1 -r1.19.2.2 src/etc/etc.evbppc/Makefile.inc
 cvs rdiff -u -r1.7 -r1.7.2.1 src/etc/etc.riscv/Makefile.inc

 Please note that diffs are not public domain; they are subject to the
 copyright notices on the relevant files.

>Unformatted:

Home	PR Database Search