Hi Robert,

>> Neither the changelog entry nor README.{Debian,source} contain
>> any justification, however.
>
>The justification is simple and obvious: current upx does not compile
>with the current lzma-dev.

that could be fine, depending on the circumstances, but needs
to be documented.

>Also let me quote the following upstream note from
>stub/src/c/Makevars.lzma file in upx source code:
>
>  # UPX unconditionally uses its own version in src/lzma-sdk because
>  # that version works fine since 2006 and that is the only version
>  # that is actually sufficiently tested!!!

This, however, is something *every* upstream says. Only in very
select few circumstances (rsync’s patched zlib) is this true and
not replaceable, though; others merely wish for “the user having
the same libraries everywhere” and thus bundle, say, vulnerable
versions of libfreetype.

Sure, the LZMA libraries in Debian may offer a slightly different
API, but it can be adapted to work with it. You could even feed
that work upstream!

bye,
//mirabilos
-- 
11:56⎜«liwakura:#!/bin/mksh» also, i wanted to add mksh to my own distro │
i was disappointed that there is no makefile │ but somehow the Build.sh is
the least painful built system i've ever seen │ honours CC, {CPP,C,LD}FLAGS
properly │ looks cleary like done by someone who knows what they are doing

Reply via email to