On Thu, Jan 19, 2023 at 8:53 AM Alexander Kanavin <[email protected]> wrote: > > I think Cargo.lock contains those checksums and that forces cargo to > verify them? Can you check that verification happens and fails when it > should by e.g. patching it to have bogus checksums? >
Ah, yes... I'll check. > Alex > > On Thu, 19 Jan 2023 at 08:15, Alex Kiernan <[email protected]> wrote: > > > > Unless I'm missing something, I just realised that we're not > > validating downloaded crate checksums when we fetch them with crate:// > > - Surely we should be? > > > > -- > > Alex Kiernan > > > > > > -- Alex Kiernan
-=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#176127): https://lists.openembedded.org/g/openembedded-core/message/176127 Mute This Topic: https://lists.openembedded.org/mt/96373035/21656 Group Owner: [email protected] Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub [[email protected]] -=-=-=-=-=-=-=-=-=-=-=-
