* Bálint Réczey: > Wireshark's more than one million lines in C and the typical use case > of analyzing untrusted network traffic makes hardening a must. Gdb-s > current inability of handling PIE does not justify dropping this > feature of hardening and hopefully 7.1 will be released soon with PIE > support.
Sure, that's a trade-off I can live with. > I'm against providing -dbg because debugging even without -dbg is > simple enough and -dbg would take additional space on the mirrors/take > more time to build, etc. I'm not sure what you mean by "simple enough". The wireshark-dbg package I built locally is 16 MB (56 MB installed size). I'm too lazy to measure build times here, but I'd expect that the extra time needed for copying and packaging won't seriously hurt anywhere. > I'll reconsider this decision when upstream makes Wireshark more > parallel, thus increasing the probability of having bugs hard to > debug. For people who want to develop their own extensions (that's what wireshark-dev is for, right?) a -dbg package will be very useful as soon as we get a gdb with PIE support in Debian. -Hilko -- To UNSUBSCRIBE, email to [email protected] with a subject of "unsubscribe". Trouble? Contact [email protected]
