Source: zsync
Version: 0.6.2-7
Severity: serious

Downloading any zsync file causes a file with a mangled name and
contents to appear, in addition to a .part file which also has
incorrect contents (but correct size):

# zsync 
http://cdimage.ubuntu.com/ubuntu-base/noble/daily/current/noble-base-amd64.tar.gz.zsync
#################### 100.0% 0 Bps DONE
No relevent local data found - I will be downloading the whole file.
If that's not what you want, CTRL-C out. You should specify the local
file is the old version of the file to download with -i (you might
have to decompress it with gzip -d first). Or perhaps you just have no
data that helps download the file
downloading from
http://cdimage.ubuntu.com/ubuntu-base/noble/daily/current/noble-base-amd64.tar.gz:
#################### 100.0% DONE          0:01
failed to retrieve from noble-base-amd64.tar.gz
Aborting, download available in noble-base-amd64.tar.gz.part
verifying download...

# ls -lh
total 315M
-rw-rw-r-- 1 root root 315M Apr 16 08:03 ' a'$'\227\306\333''y'
-rw------- 1 root root  29M Apr 16 08:03  noble-base-amd64.tar.gz.part

# for f in *; do sha256sum "$f"; done
56499760b7f78ee5f7ff188abfc73d00fe35563506a42ff31edeb280716c9c4a   '
a'$'\227\306\333''y'
fb20e04f04a0fe6454974c267a347eca304e8586b02197dfd9efb8d114fd9040
noble-base-amd64.tar.gz
3058559090ef6ee374a85bfff0903aa38ecb4d644283ccc7def566be958a3a15
noble-base-amd64.tar.gz.part

Where noble-base-amd64.tar.gz is a known-good download, so the
contents of both files generated by zsync are incorrect.

A revert to 0.6.2-6 fixes the problem.

Reply via email to