On 02/10/2014 01:32 PM, Bastian Blank wrote:
> I see this problem clearly in the shipped binaries:
> 
> | public class com.google.inject.internal.asm.$ClassWriter extends 
> com.google.inject.internal.asm.$ClassVisitor {
> |   public final void visit(int, int, java.lang.String, java.lang.String, 
> java.lang.String, java.lang.String[]);
> | }
> 
> However this definition is _not_ in the current sources, so we have no
> source for this binary package in the repository.

Strictly speaking, it's not true to say that we don't have the source
for this binary package in the repository.  The ClassVisitor.class file
that jarjar pulled in from libasm[34]-java is built from sources in the
archive.  See the ClassVisitor.java class in those packages.

I'm not trying to downplay the issue, it's a serious problem - both the
runtime issue and the jarjar bundling issue - only pointing out that we
do have sources for this class in the Debian archive.

Cheers,
tony



Attachment: signature.asc
Description: OpenPGP digital signature

__
This is the maintainer address of Debian's Java team
<http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-java-maintainers>. 
Please use
debian-j...@lists.debian.org for discussions and questions.

Reply via email to