mirror of
https://gitlab.com/buildroot.org/buildroot.git
synced 2026-10-30 04:34:13 -09:00
42340d022f
BR2_DOWNLOAD_FORCE_CHECK_HASHES=y is supposed to make the build fail if any download cannot be successfully verified against a known hash. However, support/download/check-hash would only warn if there was no hash file at all for the package in question, and allow the build to continue. This is a security fix and should be backported to all stable branches. Signed-off-by: Fiona Klute <fiona.klute@gmx.de> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>