unofficial mirror of guix-patches@gnu.org 
 help / color / mirror / code / Atom feed
From: Frank Pursel <frank.pursel@gmail.com>
To: 32947@debbugs.gnu.org
Subject: [bug#32947] Add java-xalan-interp
Date: Fri, 19 Aug 2022 17:57:01 -0700	[thread overview]
Message-ID: <87r11b4tr6.fsf@Ginko.local.mail-host-address-is-not-set> (raw)
In-Reply-To: <20181005151859.9616-1-dannym@scratchpost.org>

>  I was able to apply this patch on current master
>  ec6122250de7c83a7e77054584a34767b11337db ... and successfully build
>  java-xalan-interp!
>  
>  But this appears to add java-xalan-interp, but the subject is "Add
>  java-xalan".

Back in 2018 people tried to add java-xalan but it never happened
because the dependencies were never factored out and the author of the
original effort apparently lost interest.

I submitted an original patch to build an alternate, interpreted,
version of xalan that avoided use of the unbootstrappable dependencies
that were the earlier problem.  Maxime prompted significant improvements
to this patch to obtain the final version which you built but I thought
it should have a name to distinguish it from the most common version
which we did not build.  The version this patch builds is an
'interpreted' version so I labelled it java-xalan-interp.  Presumably,
in a future where java-cup could be bootstrapped (currently it cannot be
bootstrapped and so is excluded from guix and unused in this build of
java-xalan-interp) we might eventually be able to provide java-xalan and
comparisons might be made with java-xalan-interp.

>  I'm not confident in reviewing the whole patch series, and not terribly
>  savvy with guile or java ...
>  
>  The patches started in 2018, are some of the earlier patches applied?
>  Are there other patches that still need applying? Or can they be
>  dropped?

They can be dropped because they were in the depricated style as well as
depended on binary blobs from other sources that are not in guix and
have not yet proven to be bootstrappable in guix.

>  
>  Do you have a summary of the discussion around licensing and other
>  issues? Makes me a bit nervous to apply patches as the current status is
>  not totally clear to me.
>

Summarizing -- the details are all above -- Maxime Devos identified some
code from other projects included in the xalan source bundle which was
of a suspicious nature.  The patch here deletes this code and only
creates an older version of xalan that is interpreted rather than
compiled with the unbuildable compiler dependency.  Maxime conducted a
nearly line by line scrutiny of all the code and found two reference to
JDK1.0 sources that he asked about upstream.  Apache responded that the
identified code was depricated by the JDK and that they had continued to
maintain it.  He also found a drawing that was part of the testing code
for which we added correct acknowledgement in the current package.  I
believe all these curiosities have been appropriately considered.  No
further action is either needed or anticipated.  

>  If these aren't the first generation patches in the series, maybe
>  re-send the patches that still need applying as a [PATCH v2] (or v3?
>  v4?) in the subject of each patch?

The patch you built is the only one needed to build the entire
java-xalan-interp library.  The earlier versions are no longer relevant.

>  With a summary clarifying the licensing and which exact patches still
>  need applying, that would make it a lot easier to review!
>
>  
>  Thanks for contributing to guix, and hanging onto patience with the
>  process!
>  
>  
>  live well,
>    vagrant

Hoping that guix will soon be able to add this complete xalan
implementation to guix in the near future.

Regards,
Frank Pursel




  parent reply	other threads:[~2022-08-20  0:58 UTC|newest]

Thread overview: 53+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2018-10-05 15:18 [bug#32947] [PATCH 0/3] Add java-xalan Danny Milosavljevic
2018-10-05 15:20 ` [bug#32947] [PATCH 1/3] gnu: Add java-cup Danny Milosavljevic
2018-10-05 15:20   ` [bug#32947] [PATCH 2/3] gnu: Add java-jakarta-regexp Danny Milosavljevic
2018-10-05 15:20   ` [bug#32947] [PATCH 3/3] gnu: Add java-xalan Danny Milosavljevic
2018-10-05 15:46     ` Julien Lepiller
2018-10-05 15:28   ` [bug#32947] [PATCH 1/3] gnu: Add java-cup Julien Lepiller
2018-10-05 16:00     ` Danny Milosavljevic
2018-10-05 16:13       ` Julien Lepiller
2018-10-05 15:52   ` Julien Lepiller
2018-12-19 14:05 ` [bug#32947] Add java-xalan Julien Lepiller
2022-03-17 21:08 ` Frank Pursel
2022-03-17 21:50   ` Maxime Devos
2022-03-17 21:53   ` Maxime Devos
2022-03-17 21:57   ` Maxime Devos
2022-03-18 17:40   ` Maxime Devos
2022-03-18 18:15     ` Frank Pursel
2022-03-18 18:22       ` Frank Pursel
2022-03-18 19:19         ` Maxime Devos
2022-03-18 17:29 ` Frank Pursel
2022-03-18 17:59   ` Maxime Devos
2022-03-18 19:16 ` Frank Pursel
2022-03-18 20:07   ` Maxime Devos
2022-03-18 20:42     ` Frank Pursel
2022-03-19 15:58     ` Maxime Devos
2022-03-22 17:45     ` Maxime Devos
2022-03-22 18:18       ` Julien Lepiller
2022-03-30 17:43     ` Maxime Devos
2022-03-30 18:41       ` Maxime Devos
2022-03-30 20:23         ` Frank Pursel
2022-04-03  8:32     ` Maxime Devos
2022-04-05 13:12     ` Maxime Devos
2022-04-05 21:09       ` Frank Pursel
2022-04-09 13:40       ` Maxime Devos
2022-04-11 16:36         ` Frank Pursel
2022-04-12  9:32           ` Maxime Devos
2022-04-13 23:43             ` Frank Pursel
2022-04-14  8:30               ` Maxime Devos
2022-04-14 16:07                 ` Frank Pursel
2022-04-14 20:33       ` Maxime Devos
2022-04-14 20:49         ` Frank Pursel
2022-04-16 21:02   ` Maxime Devos
2022-04-19 17:13     ` Frank Pursel
2022-04-19 18:44       ` Maxime Devos
2022-04-19 18:55         ` Frank Pursel
2022-03-19 15:41 ` Frank Pursel
2022-03-19 16:38 ` Frank Pursel
2022-03-23  1:32 ` Frank Pursel
2022-03-23 14:14 ` Frank Pursel
2022-08-19 22:05   ` Vagrant Cascadian
2022-06-24 15:23 ` [bug#32947] [PATCH 0/3] Add java-xalan: reverse ping Maxime Devos
2022-07-14 23:46 ` [bug#32947] [PATCH 0/3] Add java-xalan Frank Pursel
2022-08-20  0:57 ` Frank Pursel [this message]
2022-09-20 21:25 ` [bug#32947] Add java-xalan-interp CVE Frank Pursel

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

  List information: https://guix.gnu.org/

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=87r11b4tr6.fsf@Ginko.local.mail-host-address-is-not-set \
    --to=frank.pursel@gmail.com \
    --cc=32947@debbugs.gnu.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
Code repositories for project(s) associated with this public inbox

	https://git.savannah.gnu.org/cgit/guix.git

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for read-only IMAP folder(s) and NNTP newsgroup(s).