[LLVMdev] proposal to avoid zlib dependency.
chandlerc at google.com
Thu Sep 18 02:18:12 PDT 2014
On Thu, Sep 18, 2014 at 2:15 AM, Yaron Keren <yaron.keren at gmail.com> wrote:
> There are very good reasons why packaging an external library is a big
> headache in general.
> However, for zlib it's not so bad for several reasons.
> 1 zlib is stable, code and file format. The last release is 1.5 years old.
> Manually updating the zlib sources once or twice a year is trivial.
> 2 For llvm, there should not be a problem with possible security exploits
> forcing quick patch, as long zlib is used to encode debug information
> coming from llvm.
> 3 gdb uses the system zlib library of which there are many outdated copies
> around, so gdb can not expect to have the latest zlib. Thus, even if we
> miss an update, it's not likely to be a real problem.
Yes, these are all good points both against blindly bundling such libraries
and why for LLVM + zlib they likely don't matter that much.
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the llvm-dev