From mboxrd@z Thu Jan 1 00:00:00 1970 From: Leo Famulari Subject: Re: libgd security update / i686 issues Date: Fri, 29 Jul 2016 11:42:31 -0400 Message-ID: <20160729154231.GB11435@jasmine> References: <20160728072337.GA1011@jasmine> <20160728212618.GA12938@jasmine> <87zip0a3qh.fsf@gnu.org> Mime-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:55265) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1bT9vz-00052N-2s for guix-devel@gnu.org; Fri, 29 Jul 2016 11:42:48 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1bT9vu-00044L-UV for guix-devel@gnu.org; Fri, 29 Jul 2016 11:42:46 -0400 Content-Disposition: inline In-Reply-To: <87zip0a3qh.fsf@gnu.org> List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-devel-bounces+gcggd-guix-devel=m.gmane.org@gnu.org Sender: "Guix-devel" To: Ludovic =?iso-8859-1?Q?Court=E8s?= Cc: guix-devel@gnu.org On Fri, Jul 29, 2016 at 05:00:38PM +0200, Ludovic Courtès wrote: > Leo Famulari skribis: > > Instead of updating to 2.2.3, we could also try cherry-picking the > > upstream commits that address this bug, as attached. > > Are there any good reasons not to update? > > I would tend to update, which sounds simpler and will have to be done > anyway, but maybe I’m overlooking something. I tried the update, because it's indeed simpler, but that breaks the libgd build on i686-linux due to a test failure. Upstream suggests to build with '-msse -mfpmath-sse'. But, as Mark pointed out, this would mean we drop support for older i686 hardware without SSE, at least for software that uses libgd. The patch that Mark has in the current package tree works around this, and he also updated his patch for the new version of libgd. Unfortunately, it seems that the upstream developers have turned on -Werror. So, Mark's approach makes the build fail on, at least, x86_64, due to warnings about unused variables being treated as errors. I pasted these error messages elsehwere in this thread. I don't really like cherry-picking these commits; they are not from the correct gd-2.2.2 branch. We could also try deleting the test, disabling -Werror, complaining to upstream, take another approach at disabling the test conditionally, or ... something else?