RPM

Comment 1 for bug 638600

Revision history for this message
In , Miloslav (miloslav-redhat-bugs) wrote :

RPM currently supports SHA-2 in RPMTAG_FILEDIGESTS, but it doesn't handle
packages that change digest algorithm (e.g. on upgrades) correctly.

(I'm not an expert at RPM code. Please correct me if I'm wrong.)

There are three places where RPM compares file digests from different packages:
- handleInstInstalledFiles
- handleOverlappedFiles
- rpmfiDecideFate

In all three cases at least one of the digests comes from a complete RPM package, so it should be possible to unpack the payload of the package and compute digests of "the other" type for all files in the package.