go data_error ai_generated partial

验证 github.com/foo/[email protected]: 校验和不匹配：下载的哈希 (h1:abc123) != 期望的哈希 (h1:def456)

verifying github.com/foo/[email protected]: checksum mismatch: downloaded hash (h1:abc123) != expected hash (h1:def456)

ID: go/checksum-mismatch-download

其他格式: JSON · Markdown 中文 · English
80%修复率
80%置信度
0证据数
2024-02-10首次发现

版本兼容性

版本状态引入弃用备注
1.11 active — — —
1.17 active — — —
1.22 active — — —

根因分析

下载的模块内容与 go.sum 中记录的校验和不匹配，可能是下载损坏或代理被篡改。

English

The downloaded module content does not match the checksum recorded in go.sum, possibly due to a corrupted download or a malicious proxy.

generic

解决方案

  1. 70% 成功率 
    go mod download github.com/foo/[email protected] && go mod tidy
  2. 40% 成功率 
    GONOSUMDB=github.com/foo/bar go mod download

无效尝试

常见但无效的做法:

  1. 50% 失败

    If the proxy is serving corrupted data, re-downloading will produce the same mismatch.

  2. 60% 失败

    Go will still verify checksums unless you use GONOSUMCHECK (deprecated) or GONOSUMDB; this may hide security issues.