From: Michael Vogt <michael.vogt@ubuntu.com>
Date: Fri, 9 Sep 2005 00:06:10 +0000 (+0000)
Subject: * don't forget the final md5sum checking!
X-Git-Tag: 0.7.21~334^2~5
X-Git-Url: https://git.saurik.com/apt.git/commitdiff_plain/2d4722e202421007bc34f5439ab4a7cd0bd1148f

* don't forget the final md5sum checking!
---

diff --git a/apt-pkg/acquire-item.cc b/apt-pkg/acquire-item.cc
index c4c0b73a9..8a9a4c5bb 100644
--- a/apt-pkg/acquire-item.cc
+++ b/apt-pkg/acquire-item.cc
@@ -375,9 +375,26 @@ void pkgAcqIndexDiffs::Finish(bool allDone)
    // we restore the original name, this is required, otherwise
    // the file will be cleaned
    if(allDone) {
-      // this is for the "real" finish
       DestFile = _config->FindDir("Dir::State::lists");
       DestFile += URItoFileName(RealURI);
+
+      // do the final md5sum checking
+      MD5Summation sum;
+      FileFd Fd(DestFile, FileFd::ReadOnly);
+      sum.AddFD(Fd.Fd(), Fd.Size());
+      Fd.Close();
+      string MD5 = (string)sum.Result();
+
+      if (!ExpectedMD5.empty() && MD5 != ExpectedMD5)
+      {
+	 Status = StatAuthError;
+	 ErrorText = _("MD5Sum mismatch");
+	 Rename(DestFile,DestFile + ".FAILED");
+	 Dequeue();
+	 return;
+      }
+
+      // this is for the "real" finish
       Complete = true;
       Status = StatDone;
       Dequeue();