From b48f671774be4114934ec5894e0d23e32cedabc9 Mon Sep 17 00:00:00 2001
From: catbref <misc-github@talk2dom.com>
Date: Mon, 17 Jun 2019 10:01:40 +0100
Subject: [PATCH] In AutoUpdate, pass download buffer to SHA256 digester BEFORE
 deXORing.

---
 src/main/java/org/qora/controller/AutoUpdate.java | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/src/main/java/org/qora/controller/AutoUpdate.java b/src/main/java/org/qora/controller/AutoUpdate.java
index 756d2ff7..56ea0fef 100644
--- a/src/main/java/org/qora/controller/AutoUpdate.java
+++ b/src/main/java/org/qora/controller/AutoUpdate.java
@@ -173,10 +173,13 @@ public class AutoUpdate extends Thread {
 					if (nread == -1)
 						break;
 
+					// Hash is based on XORed version
+					sha256.update(buffer, 0, nread);
+
+					// ReXOR before writing
 					for (int i = 0; i < nread; ++i)
 						buffer[i] ^= XOR_VALUE;
 
-					sha256.update(buffer, 0, nread);
 					out.write(buffer, 0, nread);
 				} while (true);
 				out.flush();