Ethereal-dev: Re: [Ethereal-dev] zlib version upgrade - security issue

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: Andrew Hood <ajhood@xxxxxxxxx>
Date: Tue, 26 Jul 2005 08:06:24 +1000
Ulf Lamping wrote:
> Thomas Boehne wrote:
--snippage--
>> Maybe the downloaded files and the unzipped directories should be in
>> different directories; than we could always delete the whole directory
>> with all unzipped files on make clean (or distclean or whatever). This
>> would increase the build time by some seconds, but IMHO, the current
>> behaviour is a security problem, since we link with old libraries
>> without recognizing it.
>>  
>>
> I thought it would be already the case that the libs are deleted before
> next usage. Gerald, any ideas?

This would be a royal pain in the a*** building with MSCV7 if it
overwrote the carefully hand built zlib ( as explained in
http://wiki.ethereal.com/Development_2fMSVC7 )

-- 
There's no point in being grown up if you can't be childish sometimes.
                -- Dr. Who