[erlang-questions] Using system's zlib
Sun Jul 8 10:19:02 CEST 2007
We might do some changes in R12B to make it easier to use
the system zlib.
Christian Faulhammer <opfer@REDACTED> writes:
> * PGP Signed by an unknown key: 07/06/2007 at 07:50:50 PM
> Gaspar Chilingarov <nm@REDACTED>:
> > Christian Faulhammer wrote:
> > > Gaspar Chilingarov <nm@REDACTED>:
> > >> AFAIK no, because erlang's zlib is heavily patched :)
> > > Doh. I don't really like that...is there any chance that one day
> > > erlang can use vanilla zlib? How heavy are the patches? Could zlib
> > > upstream integrate them?
> > at current moment erlang uses zlib v. 1.2.3, which is the latest
> > according to zlib's official site.
> Good to know.
> > About patches -- it took me about 1-2 day to merge in new version of
> > zlib to erlang sources :)
> Still, are those patches very special or could upstream provide your
> needed features?
> > In other hand -- what's the reason to include system zlib, if now
> > it's shipped with latest version of zlib?
> As I am maintainer of erlang in Gentoo Linux, I have a bug open asking
> for using system's zlib, but that is not important to you. :)
> Take it that there is a security flaw in zlib. zlib in Gentoo is
> updated, stabled and done. Nobody thinks of erlang (or any other
> package shipping a custom version of zlib instead of linking against
> the system one), so we have a possibly vulnerable version in the tree.
> Which is baaaaad. Backporting patches from vanilla zlib to erlang is
> just needless work in my eyes, and I have to be aware of these fixes
> or even of an included library (there may be more I don't know about).
> * Unknown Key
> * 0x2B859DE3 (L)
> erlang-questions mailing list
Björn Gustavsson, Erlang/OTP, Ericsson AB
More information about the erlang-questions