fix #25322

diff --git a/pear/PEAR/Installer.php b/pear/PEAR/Installer.php
index efb28e41fd0907b175cd41f31dc4394c9b0bb788..d4057f4e8cad2c7e5ec263f7830f144a85b5f019 100644 (file)
--- a/pear/PEAR/Installer.php
+++ b/pear/PEAR/Installer.php
@@ -284,7 +284,8 @@ class PEAR_Installer extends PEAR_Common
             if (strtolower($md5sum) == strtolower($atts['md5sum'])) {
                 $this->log(3, "md5sum ok: $final_dest_file");
             } else {
-                $this->log(0, "warning : bad md5sum for file $final_dest_file");
+                return $this->raiseError("bad md5sum for file $final_dest_file",
+                                         PEAR_INSTALLER_FAILED);
             }
         }
         if (!OS_WINDOWS) {

diff --git a/pear/package-PEAR.xml b/pear/package-PEAR.xml
index efc1567681876bd3dc2c662a9b261ce969753b6a..b378482af4ef5ecbfbf73d03f9793aeb50b26842 100644 (file)
--- a/pear/package-PEAR.xml
+++ b/pear/package-PEAR.xml
@@ -65,6 +65,7 @@ use of inadvisable @ in setErrorHandling
   pear install DB-1.2.tar to download as uncompressed tar
 * Fix #25008 - unhelpful error message
 * Fixed optional dependencies in Dependency.php
+* Fix #25322 - bad md5sum should be fatal error
     </notes>
     <provides type="class" name="OS_Guess" />
     <provides type="class" name="System" />