Red Hat Bugzilla – Bug 463903
Source URL in spec file is wrong
Last modified: 2013-07-02 23:20:11 EDT
The spec file contains this source URL:
However, this file is missing. It appears the extension should
be '.gz' instead.
Well, the reason it says bz2 is that some previous maintainer of the package decided to repack gz to bz2, I suppose to make the SRPM smaller. Doesn't really seem worth changing it to me ...
The bz2 is not an official upstream source archive though - its some custom re-spin job by the original RHL maintainer. All Fedora packages should be using the pristine upstream source unless there's specific code we need to remove for legal reasons.
"- MUST: The sources used to build the package must match the upstream source,
as provided in the spec URL. Reviewers should use md5sum for this task. If no
upstream URL can be specified for this package, please see the Source URL
Guidelines for how to deal with this."
The specific reason why we noticed this problem is that we run automated tools on MinGW packages to verify that their contents match the corresponding native packages. MinGW libjpeg source matches upstream, and hence our integrity reports flagged up this problem in native package of not using a verifiable upstream source.
It's kind of important for MinGW, because we are basing our
mingw32-libjpeg package off this one, using automated tools
to routinely compare the differences in the specfiles.
Either our tools will warn about this bug, or we'll get
a Source-URL bug filed against our package too.
I don't mind making the change if I have commit access.
OK, done in HEAD.
Note that I had already fixed this a long time ago in bug #226032 (the merge review). I'm updating the patch in that report right now, and I'd appreciate if the current libjpeg maintainer could have a quick look at it.