FS#77969 - [coreutils] checksums --check reports "OK" for wrong checksum

Attached to Project: Arch Linux
Opened by Christian Heusel (gromit) - Thursday, 23 March 2023, 13:34 GMT
Last edited by Sébastien Luttringer (seblu) - Saturday, 25 March 2023, 12:19 GMT
Task Type Bug Report
Category Packages: Core
Status Closed
Assigned To Sébastien Luttringer (seblu)
Architecture All
Severity High
Priority Normal
Reported Version
Due in Version Undecided
Due Date Undecided
Percent Complete 100%
Votes 0
Private No



There is a bug in the latest coreutils package that reports where checksuming files reports "OK" even if the checksum does not match. The bug only occurs if the checksum is the first of n.
I opened this bugreport to give visibility to this bug on official arch resources and to inform the [coreutils] maintainer of it so they can decide whether to backport the patch that fixes the bug (patch is linked in the bugreport).

This bug was reported first by user u/patenteng on reddit: https://redd.it/11zdecf
moviuro reposted it to the coreutils bugtracker: https://debbugs.gnu.org/cgi/bugreport.cgi?bug=62403

Additional info:
* package version(s): 9.2-1
* link to upstream bug report, if any: https://debbugs.gnu.org/cgi/bugreport.cgi?bug=62403

Steps to reproduce:
echo "123" > 1
echo "1234" > 2
echo "abc" > 3
sha256sum 1 2 3 > sums.sha256
# alter the second file
echo "123" > 2
sha256sum -c sums.sha256
tail -n 2 sums.sha256 | sha256sum -c


1: OK
2: OK
3: OK
sha256sum: WARNING: 1 computed checksum did NOT match
3: OK
sha256sum: WARNING: 1 computed checksum did NOT match
This task depends upon

Closed by  Sébastien Luttringer (seblu)
Saturday, 25 March 2023, 12:19 GMT
Reason for closing:  Fixed
Additional comments about closing:  coreutils-9.2-2
Comment by nl6720 (nl6720) - Thursday, 23 March 2023, 13:46 GMT