David Gilman <dgil...@gilslotd.com> writes: > The feature's been out for a while but I don't know how much mainstream > use it's seen. Turning it on in Debian might be the first real > widespread use. There is some risk here, but if you change it when > testing opens up again it'll benefit from getting tested throughout the > entire release cycle.
There's one reported problem, originally it used the glibc ifunc, and those custom resolver functions where sometimes called before libc was completely initialized. That code was disabled in nettle-3.2. Maybe there's beeen some recent progress with ifunc order on the glibc side, see https://sourceware.org/ml/libc-alpha/2017-01/msg00557.html Regards, /Niels -- Niels Möller. PGP-encrypted email is preferred. Keyid 368C6677. Internet email is subject to wholesale government surveillance.
