https://gcc.gnu.org/bugzilla/show_bug.cgi?id=61439
Bug ID: 61439
Summary: contrib/download_prerequisites script does not verify
integrity of packages
Product: gcc
Version: unknown
Status: UNCONFIRMED
Severity: normal
Priority: P3
Component: other
Assignee: unassigned at gcc dot gnu.org
Reporter: jim at garrison dot cc
The InstallingGCC page on the wiki recommends the use of the
contrib/download_prerequisites script for fetching gcc's dependencies.
However, the script fails to check the integrity of the downloaded files.
Since it downloads specific versions of packages, perhaps it would be best to
check against the known hash of each tarball.
