[LLVMdev] proposal to avoid zlib dependency.

[Chandler Carruth]

On Thu, Sep 18, 2014 at 2:15 AM, Yaron Keren <yaron.keren at gmail.com> wrote:

> Hi,
>
> There are very good reasons why packaging an external library is a big
> headache in general.
> However, for zlib it's not so bad for several reasons.
>
> 1 zlib is stable, code and file format. The last release is 1.5 years old.
> Manually updating the zlib sources once or twice a  year is trivial.
>
> 2 For llvm, there should not be a problem with possible security exploits
> forcing quick patch, as long zlib is used to encode debug information
> coming from llvm.
>
> 3 gdb uses the system zlib library of which there are many outdated copies
> around, so gdb can not expect to have the latest zlib. Thus, even if we
> miss an update, it's not likely to be a real problem.
>

Yes, these are all good points both against blindly bundling such libraries
and why for LLVM + zlib they likely don't matter that much.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.llvm.org/pipermail/llvm-dev/attachments/20140918/e1cf73dd/attachment.html>