Le samedi, 15 octobre 2011 08.29:34, Josua Dietze a écrit :
> Taking your word for it - here we are:
> http://www.draisberghof.de/usb_modeswitch/usb-modeswitch-1.2.0.tar.bz2
> 
> Read the README about the two install options. I'd be grateful if you could
> test both.

Oh, nice; a new usb-modeswitch release!

After a rapid look trough it, I noticed that you embed jimtcl 0.71; 
unfortunately, this fact somehow means that I will have to package jimtcl 
independently from usb-modeswitch, patch it out from the source tarball we 
release and patch usb-modeswitch's buildsystem to use the "now external" 
jimtcl.

Why that? As a distribution, we try as much as possible to limit code 
duplication, which opens cans of worms (security issues, etc.). As a 
demonstration, jimtcl was recently released as version 0.72 which fixes the 
two following issues e.g.:

        * Fix memory overwrite in built-in regexp
        * [regexp], [regsub] could leak objects in some circumstances

Those fixes are not in usb-modeswitch's jimtcl embedded copy (I don't know if 
that's a problem, eh…)

@openocd maintainers: as far as I can see, openocd embeds jimtcl too (in it's 
0.71 version too), would you be interested in co-maintaining jimtcl ?

In any case, I will file an ITP bug and start the packaging of jimtcl, on a 
collab-maint git.

Cheers, 

OdyX

Attachment: signature.asc
Description: This is a digitally signed message part.

Reply via email to