#25117 [NEW]: MD5 checksum should be checked case-insensitive

From: christian at wenz dot org Operating system: any PHP version: 4.3.3RC3 PHP Bug Type: PEAR related Bug description: MD5 checksum should be checked case-insensitive Description: ------------ the MD5 checksum in package.xml for a file only works with the PEAR installer when provided in lowercase. If capital letters (A-F) are used, a "bad checksum" warning is returned. Reason: md5_file() seems to return MD5 checksums in lowercase, however some MD5 calculation tools (e.g. the command line tool at http://www.fourmilab.ch/md5/) return checksums in upper case. The "error" (if you can call it that way) is in line 276 of PEAR\Installer.php: if ($md5sum == $atts['md5sum']) { The following would eliminate the problem: if ($md5sum == strtolower($atts['md5sum'])) { -- Edit bug report at http://bugs.php.net/?id=25117&edit=1 -- Try a CVS snapshot (php4): http://bugs.php.net/fix.php?id=25117&r=trysnapshot4 Try a CVS snapshot (php5): http://bugs.php.net/fix.php?id=25117&r=trysnapshot5 Fixed in CVS: http://bugs.php.net/fix.php?id=25117&r=fixedcvs Fixed in release: http://bugs.php.net/fix.php?id=25117&r=alreadyfixed Need backtrace: http://bugs.php.net/fix.php?id=25117&r=needtrace Try newer version: http://bugs.php.net/fix.php?id=25117&r=oldversion Not developer issue: http://bugs.php.net/fix.php?id=25117&r=support Expected behavior: http://bugs.php.net/fix.php?id=25117&r=notwrong Not enough info: http://bugs.php.net/fix.php?id=25117&r=notenoughinfo Submitted twice: http://bugs.php.net/fix.php?id=25117&r=submittedtwice register_globals: http://bugs.php.net/fix.php?id=25117&r=globals PHP 3 support discontinued: http://bugs.php.net/fix.php?id=25117&r=php3 Daylight Savings: http://bugs.php.net/fix.php?id=25117&r=dst IIS Stability: http://bugs.php.net/fix.php?id=25117&r=isapi Install GNU Sed: http://bugs.php.net/fix.php?id=25117&r=gnused