On Mon, Mar 30, 2015 at 10:20:45AM -0600, Anthony J. Bentley wrote: > This is a version that is slightly modified by the NetSurf people. > Usually libutf8proc is embedded in projects directly. The makefile > would have to be more complicated if it couldn't make use of > www/netsurf/Makefile.inc.
Please try talking some sense into upstream... both netsurf, and utf8proc. This is utterly stupid. This kind of stunt is directly related to fixing the same bug again and again in various projects that don't keep uptodate with the libutf8proc junk. This is especially annoying in areas such as utf8, which are basic building blocks that can have a HUGE impact on security. After a few years, I'm no longer amused by CVEs trickling down the tree when one library gets broken, and you figure out that there are ten messed up copies of the same stupid code in our tree...
