testing with wrong sha to ensure it is failing

Author: winskuo-quic

backends/qualcomm/scripts/install_qnn_sdk.sh

@@ -135,14 +135,17 @@ install_hexagon_sdk() {
 
   HEXAGON_ZIP_FILE="Hexagon_SDK_Linux.zip"
   # Match install_qnn's retry shape: --fail rejects HTTP errors,
-  # --retry-all-errors retries transport failures, and `unzip -t`
-  # validates the archive before we proceed.
+  # --retry-all-errors retries transport failures, `unzip -t` validates the
+  # archive, and the SHA-256 check pins the exact bytes we tested against. All
+  # are inside the retry condition so a truncated or wrong-content download is
+  # re-fetched rather than killing the job.
   HEXAGON_DOWNLOAD_MAX_ATTEMPTS=5
   for attempt in $(seq 1 ${HEXAGON_DOWNLOAD_MAX_ATTEMPTS}); do
     rm -f "/tmp/${HEXAGON_ZIP_FILE}"
     if curl --fail --retry 3 --retry-delay 5 --retry-connrefused --retry-all-errors \
          -Lo "/tmp/${HEXAGON_ZIP_FILE}" "${HEXAGON_SDK_ZIP_URL}" \
-       && unzip -tq "/tmp/${HEXAGON_ZIP_FILE}"; then
+       && unzip -tq "/tmp/${HEXAGON_ZIP_FILE}" \
+       && echo "${HEXAGON_SDK_ZIP_SHA256}  /tmp/${HEXAGON_ZIP_FILE}" | sha256sum -c -; then
       break
     fi
     ls -l "/tmp/${HEXAGON_ZIP_FILE}" 2>&1 || true

backends/qualcomm/scripts/qnn_config.sh

@@ -14,3 +14,5 @@ QNN_ZIP_URL="https://softwarecenter.qualcomm.com/api/download/software/sdks/Qual
 HEXAGON_SDK_VERSION="6.5.0.0"
 HEXAGON_TOOLS_VERSION="19.0.07"
 HEXAGON_SDK_ZIP_URL="https://apigwx-aws.qualcomm.com/qsc/public/v1/api/download/software/sdks/Hexagon_SDK/Linux/Debian/${HEXAGON_SDK_VERSION}/Hexagon_SDK_Linux.zip"
+# SHA-256 of the downloaded zip. Recompute and update when HEXAGON_SDK_VERSION changes. Command to gen followin sha: sha256sum Hexagon_SDK_Linux.zip
+HEXAGON_SDK_ZIP_SHA256="668626f75c38ce1ca993768953db9bf4b632753c3e32ed8363a8287e3aaffc9b"