After installation of 3D Model Viewer some core files have failed the integrity check

[KFislage]

Describe the bug

After installation of 3D Model Viewer some core files have failed the integrity check

To Reproduce

Steps to reproduce the behavior:

1. As administrator click on administrator icon the go to Administration Settings'
2. Click on the red marked "List of invalid files"
3. See error

Expected behavior

No fail of integrity check

Error message

Technical information

The following list covers which files have failed the integrity check. Please read
the previous linked documentation to learn more about the errors and how to fix
them.

Results

• core
  • INVALID_HASH
    • core/js/mimetypelist.js
  • EXTRA_FILE
    • core/img/filetypes/ply.svg
    • core/img/filetypes/stl.svg
    • core/img/filetypes/fcstd.svg
    • core/img/filetypes/off.svg
    • core/img/filetypes/step.svg
    • core/img/filetypes/3ds.svg
    • core/img/filetypes/glb.svg
    • core/img/filetypes/iges.svg
    • core/img/filetypes/bim.svg
    • core/img/filetypes/3dm.svg
    • core/img/filetypes/3mf.svg
    • core/img/filetypes/brep.svg
    • core/img/filetypes/mtl.svg
    • core/img/filetypes/gltf.svg
    • core/img/filetypes/obj.svg
    • core/img/filetypes/fbx.svg
    • core/img/filetypes/wrl.svg
    • core/img/filetypes/ifc.svg
    • core/img/filetypes/dae.svg

Raw output

Array
(
[core] => Array
(
[INVALID_HASH] => Array
(
[core/js/mimetypelist.js] => Array
(
[expected] => a57779b4957bedf9bac2a5791b27957ca3e2bfe7b91fd641bb0cc56801588e0778610a26141a1393d83d77bc04be67ae625c70a7ad4afb2a7f14cb64c66ee31b
[current] => 2f89825eb7ffb29a5182f874d169c133ba8abcf3d71f44ef176150f3af1ff4e75f450b4b1c218b4e924f773f7cf9e0628e0e94edc98edd6f68db315c57862db0
)

            )

        [EXTRA_FILE] => Array
            (
                [core/img/filetypes/ply.svg] => Array
                    (
                        [expected] => 
                        [current] => 1a96ccfcb244240b84cd7b9f013719e47802bf724d4a2105946d3bcfccc9d2ce49aa6d3b19a22a20d2f714137f318036faacc34ef86127470a5207ece3c3f28f
                    )

                [core/img/filetypes/stl.svg] => Array
                    (
                        [expected] => 
                        [current] => 6ad713d7f4ea0548d5cc34af1ac7e6e15518286abb0e3822bf5ec440802ac719c34112d2ec2e5aacd5a99ee1b15910b3c29efb0c95dad683457c52ec5422f459
                    )

                [core/img/filetypes/fcstd.svg] => Array
                    (
                        [expected] => 
                        [current] => 9cc09dd1b558b2e670c4529bee1b54e8070d95ffbdbb95e2f86e1580a7a4dcbec84041740da58f42de3daccf224c6d47a74648fe70702dae0bca98e0047843a4
                    )

                [core/img/filetypes/off.svg] => Array
                    (
                        [expected] => 
                        [current] => e97363a4b84c76454db55807517b675c7dd2cb2db8b20f365b55c2b765713f32d38417d902c9b27df079e7353e6556ed6274f37bb5fa96e0f2d3d047be338d0f
                    )

                [core/img/filetypes/step.svg] => Array
                    (
                        [expected] => 
                        [current] => 135a2bf067c2ea29c4c664f8373df10d59fe9b7b7df3337519942ce67febdb99fb66d3ef602ae84724e38eb43a7574adb7fca4829d0608557d5977765edb606b
                    )

                [core/img/filetypes/3ds.svg] => Array
                    (
                        [expected] => 
                        [current] => 7bcb3ed089a22ebf427ff9d70ac2897b0e87275a5b07d474173f555c309c1514a5643e48b73d13719684ff393a9ef939744bda869be0e3de4d8a154204eda199
                    )

                [core/img/filetypes/glb.svg] => Array
                    (
                        [expected] => 
                        [current] => c2b86e36db81b475843fadb739076ec891ddc22acdc13a1aecc07dd8d95f9087b941844be4fc75ea288a3d50459018f9883cdb199a69fd82318047213c2bc450
                    )

                [core/img/filetypes/iges.svg] => Array
                    (
                        [expected] => 
                        [current] => 62811854feedca70914ec769df3e50be0691ba06ece143e5bb82a48eda0bcfd371ea59b1da05cce3a65368cd54d88b699e68601fbf4c62de1794706888f2b46e
                    )

                [core/img/filetypes/bim.svg] => Array
                    (
                        [expected] => 
                        [current] => 78a36c3c4ea6ba23bd89c49a8327e9cac84e34e4598c494a4009c54ffd4329b7100795855dca502f8326231c1aa4d181060f4220152090ba4569dcfbacde05fa
                    )

                [core/img/filetypes/3dm.svg] => Array
                    (
                        [expected] => 
                        [current] => 6f67fc6fc65178fc7a433c28b7979ff7d86daf186aed7d786321ee0bf757a3cb7694b2bfee9c770b243274583d64b6c0e98281aea827ca082d945cba5a99786a
                    )

                [core/img/filetypes/3mf.svg] => Array
                    (
                        [expected] => 
                        [current] => bf87b6e8ff30605a50aaa6d6aeec47149d4ad94c4e23bf6bf14d5d737adab1df5f0c1a76dc4b01d0a8ca1e0522f19cc382f3a70c907a6634962b68a2a1db1ee5
                    )

                [core/img/filetypes/brep.svg] => Array
                    (
                        [expected] => 
                        [current] => bb949514375abc470dbd7813b006de031f3455034a574979d0ec6b4a7211ddc3014f1867a60b62d46efeadbadcee0de35e59d5e078c5a05dd3aebf095a8668b2
                    )

                [core/img/filetypes/mtl.svg] => Array
                    (
                        [expected] => 
                        [current] => 2ff4058b67594f2e98d1d951f26adf06ccd1cda8b8c410d89c3e01149ea04af12966a0a707d8e98e7de6f64150c6b1bbc3b29b267469f523e18fec5523dd2daf
                    )

                [core/img/filetypes/gltf.svg] => Array
                    (
                        [expected] => 
                        [current] => 79f6ab05ac3c3b1b1fcba07ab76d6b7aea3b49cfbb8a01701836f0a91e56217366111b3008998ddc79bcef8aea77830f2c9ca6fa2db78fbffe4b3d8648762dcb
                    )

                [core/img/filetypes/obj.svg] => Array
                    (
                        [expected] => 
                        [current] => fdf2a7a0d03ad7c4a5ca741f9d8a5bbe26e298acd2d40a4d17b7faa1dbac811e41b40ed62fd2ef75ffe5c794d042c7752b33625e2200ba4a5f9f99ac694976d7
                    )

                [core/img/filetypes/fbx.svg] => Array
                    (
                        [expected] => 
                        [current] => 340cec2b708d4ace6f448eb0cb372abc68c3c58c2879ff8245a1aba56e1f5eac0a4f6b2f1efb0a9057f908b051cd4350b68352a7d2c02ed95aabc2a3cbdcfd14
                    )

                [core/img/filetypes/wrl.svg] => Array
                    (
                        [expected] => 
                        [current] => 2bbc7a1f742f46307c6d09df10013252782b7b28a5807e907fc2922adbd94a820b2c02fce8762cfebed0d53f21a14ec81c14933516e0b71316570777be2269e1
                    )

                [core/img/filetypes/ifc.svg] => Array
                    (
                        [expected] => 
                        [current] => 9637a8ed2e39da747ced1cbe24f9a3c2e39e52a3313c1d3f2390cfb70562ef26fd2c1e7cc66efbd3fb3724e321c24d05dd3c812fe5c6444c78fea22692b51111
                    )

                [core/img/filetypes/dae.svg] => Array
                    (
                        [expected] => 
                        [current] => 0eff57fe089a3a80ff1ab65d160492504b8d4a05e445ec1da0f8a25da9ecaecabe2e42c012e9f4b918090a11245393714eb1bf99c9d9a75578e0f76858c3a475
                    )

            )

    )

)

[ChristianKuehnel]

The error message points to the Code signing page in the documentation. In the app developer documentation there is an explanation on how to sign your app. Looks like this needs to be done by the owner of the app, as they need to manage their private key for the signature...

[kroko]

the app is signed which is req for publishing into app store.

the warnings you see is not related to signing, but the fact that this app injects file definition in NC core

files_3dmodelviewer/lib/Migration/MimeTypeInstall.php

Line 34 in 31145d4

private function inConfigFiles()

that results in changing core/js/mimetypelist under hood

and here is injection

files_3dmodelviewer/lib/Migration/MimeTypeInstall.php

Line 48 in 31145d4

private function inIcons()

of the file icons (SVGs) under core/img/filetypes/ so that files look nice and tidy in file browser view.

maybe there is better way to do that, maybe there is now offiical way that does not produce errors in integrity check

[Eiernase]

When running
sudo docker exec --user www-data nextcloud-aio-nextcloud php occ integrity:check-app files_3dmodelviewer
I get
App signature not found, skipping app integrity check

[vincegre]

Just tried stupidely that app and I should not have ! It has destroyed my NC instance, I had to restore it from backup (overwrote config file, and also mimetypes !!),
Going to report it at Nextcloud so it's removed from store as it's dangerous !

[kroko]

@vincegre regarding mimetypes it has been reported by me to NC already nextcloud/server#52742
this app does not touch config file though, so check PEBKAC on your side

[vincegre]

@vincegre regarding mimetypes it has been reported by me to NC already nextcloud/server#52742 this app does not touch config file though, so check PEBKAC on your side

Thanks for the info you reported it too ;) For config file of NC it tried to edit it for sure...