Preparing for 0.155

Roland McGrath roland at hack.frob.com
Tue Aug 21 21:37:00 UTC 2012


> > This is a problematic addition that opens new security issues in the
> > tools.  [...]
> 
> Please elaborate.

They now open files whose names are controlled by the contents of input files.

> Mark has posted the dwz patches almost two months ago.  

I lost track and forgot about them until recently.

> It would be better to make progress toward responsible much more thought
> than to vaguely hold it up.

There isn't time to resolve it before I leave at the end of this week.
We can make progress on this subject when I've returned, but I think
Mark wants to get a release going before then.  Please don't start
discussing the details now and expect that I will respond or that you
can draw conclusions without my input.  I don't have time to discuss
it this week.


Thanks,
Roland


More information about the elfutils-devel mailing list