On Sat, Mar 10, 2007 at 06:19:09PM +0100, sean finney wrote: > hi paul, > On Sun, 2007-03-11 at 03:05 +1100, Paul TBBle Hampson wrote: >> Would there be any interest in having PHP5 link its xmlrpc extension >> against a distinct library packaging of xmlrpc-epi? (ie. to avoid >> the situation which once existed for zlib being statically compiled >> into various other packages, causing security headaches...) > just to clarify, are you proposing that php link against an externally > provided xmlrpc-epi library, or are you proposing that php provide its > bundled version *as* the xmlrpc-epi library for other apps to use? i'm > fairly open to both ideas though i think the former sounds better than > the latter, assuming there are no api/abi differences. also, are you > volunteering to do the packaging? :) I'm suggesting either. I'm happy to maintain the package seperately, but I intend to go through the differences between the versions and confirm that they are compatible, and steal anything good from the php-bundled version, so in effect I'd be doing both. I'd also have to track upstream PHP in case they add anything else to the library in the future. So maybe a PHP package team member might want to be a co-maintainer... A quick poke around the Internet suggested that the only patches being made by other distros to xmlrpc-epi are for gcc4, 64-bit and expat, but I haven't looked at the PHP-bundled version's changes yet, apart from verifying that the .h files match semanticly. Hmm, I'd better check this now, all the files in the libxmlrpc directory carry the same copyright headers as the upstream xmlrpc-epi distribution (BSD-like), does the PHP license override them and prevent debundling? I'd like to keep the distinct package under its upstream license if possible, as it's very very permissive, and the seconde-life client is GPLd. -- ----------------------------------------------------------- Paul "TBBle" Hampson, B.Sc, LPI, MCSE On-hiatus Asian Studies student, ANU The Boss, Bubblesworth Pty Ltd (ABN: 51 095 284 361) Paul.Hampson@Pobox.Com Of course Pacman didn't influence us as kids. If it did, we'd be running around in darkened rooms, popping pills and listening to repetitive music. -- Kristian Wilson, Nintendo, Inc, 1989 License: http://creativecommons.org/licenses/by/2.1/au/ -----------------------------------------------------------
Attachment:
pgpR5d0sk2KaF.pgp
Description: PGP signature