On Fri, Aug 11, 2017 at 12:23:42AM +0200, Tom G. Christensen wrote:
> > > I just built a pristine 2.14.0 on CentOS 5 with curl 7.15.5. No problems at
> > > all neither with building nor with running the testsuite.
> >
> > As you can see, this does not compile for me. What's going on?
> >
> The call site for get_curl_allowed_protocols() in http.c is still protected
> by an #if:
> #if LIBCURL_VERSION_NUM >= 0x071304
> curl_easy_setopt(result, CURLOPT_REDIR_PROTOCOLS,
> get_curl_allowed_protocols(0));
> curl_easy_setopt(result, CURLOPT_PROTOCOLS,
> get_curl_allowed_protocols(-1));
> #else
> warning("protocol restrictions not applied to curl redirects
> because\n"
> "your curl version is too old (>= 7.19.4)");
> #endif
>
> > I don't see how it could work, as CURLPROTO_HTTP is not defined at all
> > in that version of curl.
>
> Indeed but the #if will handle that.
Er, sorry if I'm being dense, but how? Are you suggesting that by
removing the callsite of get_curl_allowed_protocols(), the compiler
might elide the now-dead code completely? I could certainly see it being
dropped after the compilation, but I'm surprised that it wouldn't
complain about the undeclared identifiers in the first place.
And if that _is_ what is happening...that seems like a very fragile and
unportable thing to be depending on.
> > Can you please double-check that you're
> > building against the correct version of curl, and that you are building
> > the HTTP parts of Git (which _are_ optional, and the test suite will
> > pass without them).
>
> I use a mock buildroot and there is no other curl than the vendor supplied
> 7.15.5 installed:
> [...]
OK, thanks for double-checking. I'm still puzzled why your build
succeeds and mine does not.
> > I saw that, too. But as I understand it, they provide no code updates:
> > no bugfixes and no security updates. They just promise to answer the
> > phone and help you with troubleshooting. It's possible my perception is
> > wrong, though; I'm certainly not one of their customers.
>
> I am refering to the Extended Life-cycle Support product (ELS), which
> promises:
> "the ELS Add-On delivers certain critical-impact security fixes and selected
> urgent priority bug fixes and troubleshooting for the last minor release"
>
> The full description is here:
> https://access.redhat.com/support/policy/updates/errata#Extended_Life_Cycle_Phase
That was the same page I was looking at. The bit I read was:
For versions of products in the Extended Life Phase, Red Hat will
provide limited ongoing technical support. No bug fixes, security
fixes, hardware enablement or root-cause analysis will be available
during this phase, and support will be provided on existing
installations only.
But I missed the bit about the "ELS add-on" below there, which I guess
is an extra thing. I do suspect that "install arbitrary new versions of
Git" is outside of their scope of "urgent priority bug fixes". But in a
sense it doesn't really matter. What is much more interesting is whether
there's a significant population that is running RHEL5 and has a strong
need for newer versions of Git. That I'm not sure about.
-Peff
