[
https://issues.apache.org/jira/browse/XERCESC-2257?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17898638#comment-17898638
]
Boris Kolpackov commented on XERCESC-2257:
------------------------------------------
> I'm not discarding it.
Well, you are: we have fixed the security issue (and so, as far as I know,
there aren't any open ones at the moment), and you turn around and publicly
announce that Xerces-C++ is still not good enough and should be taken out back
and shot.
> But we have very different opinons about what a "maintained and safe" code
> base means, and that's just not a bridgeable divide I expect.
But "safe" for what? Is Xerces-C++ safe to parse trusted input, in your
opinion? And in my opinion, no XML parser that wasn't explicitly designed from
the grounds up to be safe on untrusted input can be considered safe. Is Expat
safe in your opinion? It gets a bunch CVEs fixes in pretty much every release.
It is also the foundation of pretty much every Linux distribution. Should it
also be take out back and shot, in your opinion?
> It's up to the macports folks to decide how to straddle that line obviously.
I don't personally care about MacPorts but I would ask you not to make similar
statements in the future about the Xerces-C++ project and its future that come
across as the position of the project and not your personal opinion.
> symbol not found in flat namespace (_xercesc_messages_3_2_dat)
> --------------------------------------------------------------
>
> Key: XERCESC-2257
> URL: https://issues.apache.org/jira/browse/XERCESC-2257
> Project: Xerces-C++
> Issue Type: Bug
> Affects Versions: 3.3.0
> Reporter: Ryan Carsten Schmidt
> Priority: Major
>
> Software linking with libxerces-c-3.3.dylib fails to work:
>
> {noformat}
> dyld[5155]: symbol not found in flat namespace (_xercesc_messages_3_2_dat)
> {noformat}
>
> This was reported to MacPorts here: [https://trac.macports.org/ticket/71304]
> This is a regression; 3.2.4 didn't have this problem.
> Surely for version 3.3.x on these lines {{3_2}} should be changed to
> {{{}3_3{}}}?
> [https://github.com/apache/xerces-c/blob/v3.3.0/src/xercesc/util/MsgLoaders/ICU/ICUMsgLoader.cpp#L54-L55]
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: c-dev-unsubscr...@xerces.apache.org
For additional commands, e-mail: c-dev-h...@xerces.apache.org
