[arch-general] Combining package deltas and signing?

[Allan McRae]

On 31/12/12 05:26, Magnus Therning wrote:
> On Fri, Dec 28, 2012 at 10:54:14PM -0500, Sébastien Leblanc wrote:
>> I believe signatures are checked after packages are rebuilt from
>> deltas. Therefore, if your delta is compromised, the resulting
>> package won't validate with the signature.
> 
> Excellent.  I also notice you use the word "deltas", plural, which
> leads me to the next question :)
> 
> Will deltas be combined by pacman, or will only ever a single delta be
> used?
> 

They can be combined.  pacman does a calculation to see whether the
delta chain is worth it.