[LLVMdev] proposal to avoid zlib dependency.

Chandler Carruth chandlerc at google.com
Thu Sep 18 02:18:12 PDT 2014

On Thu, Sep 18, 2014 at 2:15 AM, Yaron Keren <yaron.keren at gmail.com> wrote:

> Hi,
> There are very good reasons why packaging an external library is a big
> headache in general.
> However, for zlib it's not so bad for several reasons.
> 1 zlib is stable, code and file format. The last release is 1.5 years old.
> Manually updating the zlib sources once or twice a  year is trivial.
> 2 For llvm, there should not be a problem with possible security exploits
> forcing quick patch, as long zlib is used to encode debug information
> coming from llvm.
> 3 gdb uses the system zlib library of which there are many outdated copies
> around, so gdb can not expect to have the latest zlib. Thus, even if we
> miss an update, it's not likely to be a real problem.

Yes, these are all good points both against blindly bundling such libraries
and why for LLVM + zlib they likely don't matter that much.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.llvm.org/pipermail/llvm-dev/attachments/20140918/e1cf73dd/attachment.html>

More information about the llvm-dev mailing list