move pkgSourceList::AddMetaIndex() into a private subclass until we decide about...

[apt.git] / apt-pkg / acquire-item.cc

diff --git a/apt-pkg/acquire-item.cc b/apt-pkg/acquire-item.cc
index 30743addf0a85a0e1b8319b190f6ff10e818d2f4..22b77cbda310eda13c6d4f01eca272c5114c8318 100644 (file)
--- a/apt-pkg/acquire-item.cc
+++ b/apt-pkg/acquire-item.cc
@@ -2084,7 +2084,8 @@ void pkgAcqArchive::Done(string Message,unsigned long long Size,string CalcHash,
    }
    
    // Check the hash
    }
    
    // Check the hash

-   if(ExpectedHash.toStr() != CalcHash)
+   // FIXME: could this empty() check impose *any* sort of security issue?
+   if(ExpectedHash.empty() == false && ExpectedHash.toStr() != CalcHash)

    {
       RenameOnError(HashSumMismatch);
       return;
    {
       RenameOnError(HashSumMismatch);
       return;