Skip to content

[Bug Report] After modifed the hash values, the software shows that it displays as normal #215

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
DentistCode opened this issue Sep 15, 2024 · 1 comment

Comments

@DentistCode
Copy link

Hello,

Thank you for developing this software; it's incredibly useful. However, there's a small issue I'd like to mention.
I encountered two issues while using the software and would like to provide feedback as follows:

Bug 1:

When modifying 3 hash values in a .hash file with 4 hash values, the software still indicates that the file is normal. It seems the software defaults to checking with SHA-1, without flagging discrepancies in other hash algorithms.

Steps to reproduce:

  1. Generate a .hash file for a file. I used MD5, SHA-1, SHA256, and SHA3-256.
  2. Modify the MD5, SHA256, and SHA3-256 values. The software still reports the file as normal.
    image

Question 1:

When modifying the hash values in the .hash file one by one, the software only begins to show unstable behavior after the third modification.

(I have no idea about whether it is designed to like this)

Steps to reproduce:

Step 0: Initial detection (default state)
image1

Step 1: After modifying the SHA-1 value
image3

Step 2: After modifying the SHA-256 value
image4

Step 3: After modifying the SHA3-256 value
image5

Step 4: After modifying the MD5 value
image6

Wish u have a good day

@DentistCode DentistCode changed the title [Bug Reprort] After modifed the hash values, the software shows that it displays as normal [Bug Report] After modifed the hash values, the software shows that it displays as normal Sep 15, 2024
@namazso
Copy link
Owner

namazso commented May 2, 2025

A checksum file that contains impossible combinations of hashes for a file is invalid, as it cannot possibly have been generated from the same data if the hash algorithms are secure. Flagging invalid sumfiles is not the purpose of this program. In fact it'd be potentially impossible as the user may not have all algorithms enabled that the file contains.

I also don't see the use case here. What scenario is when you trust only some hashes in a sumfile, but not the others in the same file, when the algorithms in question are secure?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants