[fedora-arm] Broken sha512sum in coreutils

Gordan Bobic gordan at bobich.net
Fri Jan 7 10:54:07 UTC 2011


Andy Green wrote:
> On 01/07/11 10:40, Somebody in the thread at some point said:
>> It would appear that sha512sum is broken, at least in the F12 distro
>> (coreutils-7.6-5.fc12.fa1.armv5tel). It is producing a different hash
>> for the same file compared to what my x86 machines produce. This is
>> quite worrying and a potentially dangerous crypto-security issue.
>>
>> The only thing that comes to mind as a potential cause (other than a
>> bug) is that I am using gcc/libgcc from F13 with F12 coreutils. I just
>> updated coreutils to the F13 package (coreutils-8.4-5.fc13.armv5tel),
>> and that produces the correct hashes.
>>
>> Can anybody with a clean F12 vanilla copy check if they can reproduce
>> the problem?
> 
> No problem here.
> 
> ARM: coreutils-7.6-5.fc12.fa1.armv5tel
> 
> [root at ivmon ~]# dd if=/dev/zero of=/tmp/z bs=512 count=10
> 10+0 records in
> 10+0 records out
> 5120 bytes (5.1 kB) copied, 0.000959 s, 5.3 MB/s
> [root at ivmon ~]# sha512sum /tmp/z
> 1f1e6f098e99bb0ab52c3142f0fb545b00470d267823d44fd609fdaae1a6f45fb437de931fa16bbb4a702c0cba7abb9954b737ff4edb30f16ae39a2c67ee6bb7 
>  /tmp/z
> [root at ivmon ~]#
> 
> 
> x86_64: coreutils-8.8-2.fc15.x86_64
> 
> [agreen at otae Downloads]$ dd if=/dev/zero of=/tmp/z bs=512 count=10
> 10+0 records in
> 10+0 records out
> 5120 bytes (5.1 kB) copied, 7.6686e-05 s, 66.8 MB/s
> [agreen at otae Downloads]$ sha512sum /tmp/z
> 1f1e6f098e99bb0ab52c3142f0fb545b00470d267823d44fd609fdaae1a6f45fb437de931fa16bbb4a702c0cba7abb9954b737ff4edb30f16ae39a2c67ee6bb7 
>  /tmp/z
> [agreen at otae Downloads]$
> 
> Check with ldd what it is linking to.

Thanks for that. I'll check as soon as I get my vserver chroots going. 
I'll put a clean F12 from the backup I took in there and see what it 
does. Hopefully it's just a libgcc mismatch issue - which would be 
worrying, but it'd only arise in a franken-distro half way between F12 
and F13 (which is, sadly, all I have handy at the moment).

Gordan


More information about the arm mailing list