Skip to content

Fix galois download: use updated UTK URL#208

Open
zardus wants to merge 1 commit into
masterfrom
fix/galois-download
Open

Fix galois download: use updated UTK URL#208
zardus wants to merge 1 commit into
masterfrom
fix/galois-download

Conversation

@zardus
Copy link
Copy Markdown
Owner

@zardus zardus commented Mar 1, 2026

Summary

  • The galois download URL (~plank/...) times out, breaking the toolcheck (galois) CI job
  • The same tarball is still hosted at the updated faculty path (~jplank/...)
  • One-character fix: ~plank~jplank

Test plan

  • Verified new URL returns HTTP 200 with correct content-type and size (266 KB tar)
  • CI toolcheck (galois) should pass with the updated URL

🤖 Generated with Claude Code

The old URL (web.eecs.utk.edu/~plank/...) times out, breaking CI.
The same file is still hosted at the updated path (~jplank/...).

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Copilot AI review requested due to automatic review settings March 1, 2026 02:08
Copy link
Copy Markdown

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Updates the galois installer download URL to a currently reachable UTK hosting path so the toolcheck (galois) CI job can fetch the tarball reliably again.

Changes:

  • Switch galois tarball URL from ~plank/... to ~jplank/... in the installer script.
Comments suppressed due to low confidence (1)

galois/install:8

  • This install script downloads a third-party tarball via wget over HTTPS from web.eecs.utk.edu and immediately extracts it and runs make on its contents, without any checksum, signature, or other integrity verification. If the remote file or hosting infrastructure is compromised (or the file is replaced), an attacker can supply a malicious archive whose build steps execute arbitrary code in your CI or developer environments. To mitigate this, vendor the source into the repo or a trusted mirror, or at minimum pin and verify the download with a strong checksum or signature before extracting and building it.
wget https://web.eecs.utk.edu/~jplank/plank/papers/CS-07-593/galois.tar

mkdir -p galois
cd galois
tar xvf ../galois.tar
make

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants