Re: sox-14.3.2.tar.gz silently replaced?

> Jan Stary <hans@...>:
>
> > Is it possible that during its lifetime, the release file
> > sox-14.3.2.tar.gz as published was replaced, while retaining
> > its name?
> >
> > The reason I am asking is that recently, I have been working
> > with the MacOS port of SoX (macports.org), and found that the
> > checksum is "wrong". Surely the people who made that port did
> > have the correct checksum (of 14.3.2) back then, but now the
> > checksum is different.
>
> I had a look at  
> https://trac.macports.org/browser/trunk/dports/audio/sox/Portfile, and  
> it says
> use_bzip2        yes
> ...
> checksums        sha1    026636c90d7accba76225a2821aaa2ffa6fe41a3
>
> Now,if you calculate the checksum for the .bz2 file instead of the .gz  
> one, you'll probably find that it matches:
> $ sha1sum sox-14.3.2.tar.bz2
> 026636c90d7accba76225a2821aaa2ffa6fe41a3  sox-14.3.2.tar.bz2