[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Addressing the recent zlib issue



On Tue, Jul 12, 2005 at 01:04:05PM -0400, Michael Stone wrote:
> On Tue, Jul 12, 2005 at 07:55:08PM +0300, Mark Brown wrote:

> >Yes, although the main issue is likely to be people shipping a separate
> >copy of the source.

> Not necessarily, because a tgz might include source that isn't actually
> used. 

Yes, obviously people can include a copy of the source and not use it
(like GnuPG does, for example) - that's not a problem.  Indeed, it's a
fairly reasonable approach for people who expect their code to be
compiled in enviromnents where zlib is often not avaliable, such as
Windows.  Unfortunately it's reasonably common for people who do this to
not to bother putting the appropriate magic in their build systems and
just use it unconditionally.  

I'd be more surprised to see things that manage to link statically with
the system libz without being totally static since that requires special
effort that people are unlikely to go to without having some motivation.

-- 
"You grabbed my hand and we fell into it, like a daydream - or a fever."



Reply to: