>>>>> "Matt" == Matt Johnston <m...@ucc.asn.au> writes:
Sorry for the slow response. > Hi Peter, > External libraries are fine - Debian has used them for a > while. Thanks. Where did you see Debian using it? Looking at E.G. http://http.debian.net/debian/pool/main/d/dropbear/dropbear_2016.73-1.debian.tar.xz I see they configure with --enable-bundled-libtom. Checking here, a static build with external libtom* is unfortunately 25% bigger (75K). Is that to be expected? > The only security-important change is > https://secure.ucc.asn.au/hg/dropbear/rev/a55b97f5a485 which > I assume is already in buildroot. Yes, indeed - Thanks. > I've made a few small changes to clear memory or avoid > memory allocations - those could go upstream to libtom at > some point. Ok. -- Venlig hilsen, Peter Korsgaard
