From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mo4-p00-ob.smtp.rzone.de (mo4-p00-ob.smtp.rzone.de [81.169.146.163]) by sourceware.org (Postfix) with ESMTPS id 2C0D3385828A for ; Sat, 18 Jun 2022 17:01:32 +0000 (GMT) DMARC-Filter: OpenDMARC Filter v1.4.1 sourceware.org 2C0D3385828A Authentication-Results: sourceware.org; dmarc=none (p=none dis=none) header.from=clisp.org Authentication-Results: sourceware.org; spf=none smtp.mailfrom=clisp.org DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; t=1655571682; s=strato-dkim-0002; d=clisp.org; h=Message-ID:Date:Subject:Cc:To:From:Cc:Date:From:Subject:Sender; bh=hTc+8SllaRbaix2WduN5yEKLzs8qMOiPu+fqpJCfe0U=; b=p9EgJEJD/ErWoyy+WIBoBqXBUwfkznSqy4dFQtfarON0M8hTWzSOGKA8SJ5XeQ6+Uj kjeSXjwwQM3M/88fphtxwQ5nh7H0SWwh1G3VV3j64Zdh1/wOjZeuDENIm2d3gl82fne8 EgNihRcr0wpFMb1PZERKcSjuoicdJHEJwI+bj7W2CwAPE6eMsdqG+7iKDJVLFOV6WMbq 06FY6aXs6zhGhIUt3IC7pumoeSi22GpTRhHNTbUCSj/XaD3vKksB8qV4fstPYKx6CQeA gbN7BKt1QptxHDfoI2lKiZTOHj8Y6znszIXj+FHFjpGxJg+2OC7t6Bu2zyPByKokr+Ak uBiQ== Authentication-Results: strato.com; dkim=none X-RZG-AUTH: ":Ln4Re0+Ic/6oZXR1YgKryK8brlshOcZlIWs+iCP5vnk6shH0WWb0LN8XZoH94zm6Ln9gbQqGxADIzhcWGgwacuxvHCwpc79O2A==" X-RZG-CLASS-ID: mo00 Received: from omega.localnet by smtp.strato.de (RZmta 47.46.0 AUTH) with ESMTPSA id J5c42fy5IH1MKcn (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256 bits)) (Client did not present a certificate); Sat, 18 Jun 2022 19:01:22 +0200 (CEST) From: Bruno Haible To: gcc@gcc.gnu.org Subject: remove intl/ directory? Date: Sat, 18 Jun 2022 19:01:21 +0200 Message-ID: <32334822.2dzg3u6YtW@omega> MIME-Version: 1.0 Content-Transfer-Encoding: 7Bit Content-Type: text/plain; charset="us-ascii" X-Spam-Status: No, score=-3.7 required=5.0 tests=BAYES_00, DKIM_SIGNED, DKIM_VALID, DKIM_VALID_AU, DKIM_VALID_EF, RCVD_IN_DNSWL_NONE, RCVD_IN_MSPIKE_H3, RCVD_IN_MSPIKE_WL, SPF_HELO_PASS, SPF_NONE, TXREP, T_SCC_BODY_TEXT_LINE autolearn=ham autolearn_force=no version=3.4.6 X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on server2.sourceware.org X-BeenThere: gcc@gcc.gnu.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Gcc mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 18 Jun 2022 17:01:34 -0000 Hi, As the long-term GNU gettext maintainer, I would suggest to remove the intl/ directory from the GCC distribution. The effect for the users would be: * On systems without glibc, users who want an internationalized GCC installation would have to install GNU gettext first. Then the GCC binaries would be linked with the shared library libintl.so (unless gettext was built with --disable-shared); they would no longer contain the libintl code in 'cc1', 'cc1plus', etc. * On systems with glibc, no change. The effect for the GCC maintainers would be: * Easier to stay up-to-date with upstream libintl. * Less maintenance work with *.m4 files such as codeset.m4 glibc21.m4 intdiv0.m4 inttypes_h.m4 inttypes.m4 inttypes-pri.m4 lcmessage.m4 stdint_h.m4 uintmax_t.m4 ulonglong.m4 * Reduced risk of a CVE that would impact GCC binaries. Rationale: * This intl/ code is from 2003; of course several bugs have been fixed in it over the last 19 years. * At that time GNU packages were still favouring static libraries. GNU libtool became widely reliable only about in 2005. * Since then, distros have been favouring shared libraries over static libraries, in order to be able to fix CVEs without rebuilding many dependent binaries. * For this reason, GNU gettext removed the support for this way of packaging libintl in version 0.20 (May 2019). The NEWS entry said: - The --intl option of the gettextize program (deprecated since 2010) is no longer available. Instead of including the intl sources in your package, we suggest making the libintl library an optional prerequisite of your package. This will simplify the build system of your package. - Accordingly, the Autoconf macro AM_GNU_GETTEXT_INTL_SUBDIR is gone as well. This point came up while discussing with Eric Gallager, who is working on the GCC configury. I don't volunteer to implement this suggestion, but I can give advice where needed. Bruno