On Mon, Apr 26, 2010 at 5:05 PM, Dima Pasechnik <[email protected]> wrote:
> Hi William,
> I'll clean this up.
> When I was preparing it I was wondering whether that Windows stuff must be
> dropped, but as noone objected it remained there :)

Thanks Dima!  You were right to wonder, and I was sloppy to not object.

 -- William

>
> Best,
> Dima
>
> On 27 April 2010 07:54, William Stein <[email protected]> wrote:
>> Hello,
>>
>> Including Windows binaries with Sage's source code distribution
>> (sage-x.y.z.tar) is bad, in my opinion, because binaries can hide
>> viruses, especially Microsoft Windows binaries.  We are currently
>> shipping some, because of GAP.
>>
>> This email concerns the gap-4.4.12.p1 spkg that is included in
>> Sage-4.4.tar (and I guess earlier versions of Sage since February).
>> I'm not sure exactly what happened, but David Joyner and I screwed up
>> bigtime giving that a positive review.   That package adds a bunch of
>> Windows binaries to the GAP spkg.     The Sage source tarball must
>> absolutely never contains windows binaries.
>>
>> So, for future reference (and I'm talking about me here too), people
>> please be careful to check this sort of thing.   And please be
>> especially careful with updating the GAP spkg.  It's upstream I think
>> that includes these binaries in the "source" file: gap4r4p12.tar.bz2
>> (see [1] below).  (I'm cc'ing upstream, in the hopes they will stop
>> shipping windows binaries with their source distribution.)
>>
>> See blocker ticket http://trac.sagemath.org/sage_trac/ticket/8774
>> which is about removing this stuff from the GAP spkg.
>>
>> (And volunteers to write something so that this sort of thing can't
>> happen again... welcome!)
>>
>>  -- William
>>
>> [1]
>> wst...@boxen:/tmp$ wget
>> ftp://ftp.gap-system.org/pub/gap/gap44/tar.bz2/gap4r4p12.tar.bz2
>> --16:48:48--  
>> ftp://ftp.gap-system.org/pub/gap/gap44/tar.bz2/gap4r4p12.tar.bz2
>>           => `gap4r4p12.tar.bz2'
>> Resolving ftp.gap-system.org... 138.251.192.244
>> Connecting to ftp.gap-system.org|138.251.192.244|:21... connected.
>> Logging in as anonymous ... Logged in!
>> ==> SYST ... done.    ==> PWD ... done.
>> ==> TYPE I ... done.  ==> CWD /pub/gap/gap44/tar.bz2 ... done.
>> ==> PASV ... done.    ==> RETR gap4r4p12.tar.bz2 ... done.
>> Length: 47,715,810 (46M) (unauthoritative)
>>
>> 100%[=============================================================================>]
>> 47,715,810   207.40K/s    ETA 00:00
>>
>> 16:52:19 (224.11 KB/s) - `gap4r4p12.tar.bz2' saved [47715810]
>>
>> wst...@boxen:/tmp$ tar jxvf gap4r4p12.tar.bz2
>> gap4r4/
>> gap4r4/etc/
>> gap4r4/etc/GPL
>> gap4r4/etc/gap_indent.vim
>> gap4r4/etc/xrmtcmd.c
>> gap4r4/etc/README.vim-utils
>> gap4r4/etc/emacs/
>> gap4r4/etc/emacs/gap-mode.doc
>> gap4r4/etc/emacs/gap-mode.el
>> gap4r4/etc/emacs/comint.el
>> gap4r4/etc/emacs/gap-process.el
>> gap4r4/etc/debug.vim
>> gap4r4/etc/debugvim.txt
>> gap4r4/etc/gap.vim
>> gap4r4/description4r4p7
>> gap4r4/bin/
>> gap4r4/bin/libW11.dll
>> gap4r4/bin/gapp.pif
>> gap4r4/bin/regtool.exe
>> gap4r4/bin/gapp.bat
>> gap4r4/bin/gap.dll
>> gap4r4/bin/i686-pc-cygwin-gcc/
>> gap4r4/bin/i686-pc-cygwin-gcc/gap.dll
>> gap4r4/bin/i686-pc-cygwin-gcc/gac
>> gap4r4/bin/i686-pc-cygwin-gcc/config.h
>> gap4r4/bin/gapw95.exe
>> gap4r4/bin/gapicon.bmp
>> gap4r4/bin/gapw95p.exe
>> gap4r4/bin/usemem.bat
>> gap4r4/bin/cygpanel-8.dll
>> gap4r4/bin/cygncurses-8.dll
>> gap4r4/bin/rxvt.exe
>> gap4r4/bin/gap.pif
>> gap4r4/bin/cygwin1.dll
>> gap4r4/bin/gap.bat
>> gap4r4/bin/gaprxvt.bat
>> gap4r4/grp/
>>
>>
>> --
>> William Stein
>> Professor of Mathematics
>> University of Washington
>> http://wstein.org
>>
>
>
>
> --
> Dmitrii Pasechnik
> -----
> DISCLAIMER: Any text following this sentence does not constitute a
> part of this message, and was added automatically during transmission.
>



-- 
William Stein
Professor of Mathematics
University of Washington
http://wstein.org

-- 
To post to this group, send an email to [email protected]
To unsubscribe from this group, send an email to 
[email protected]
For more options, visit this group at http://groups.google.com/group/sage-devel
URL: http://www.sagemath.org

Reply via email to