The below libffi sources have different hash sums: http://sources.buildroot.net/libffi/libffi-3.3.tar.gz https://gcc.gnu.org/pub/libffi/libffi-3.3.tar.gz I am not sure its a usual practice for buildroot to repack source packages.
stsp, All, > The below libffi sources have different hash sums: > http://sources.buildroot.net/libffi/libffi-3.3.tar.gz > https://gcc.gnu.org/pub/libffi/libffi-3.3.tar.gz That's because Buildroot is not downloading from the GNU mirror, but directly from the github repository: https://git.busybox.net/buildroot/tree/package/libffi/libffi.mk#n8 Regards, Yann E. MORIN.