On 12/6/24 11:15 AM, Mark Liam Brown wrote:
On Fri, Dec 6, 2024 at 4:54 PM Chuck Lever <chuck.lever@xxxxxxxxxx> wrote:
IMO, using a URL parser library might be better for us in the
long run (eg, more secure) than adding our own little
implementation. FedFS used liburiparser.
Yeah, another library dependency for Debian? First you try to invade
Debian with libxml2 via backdoor, and now you try to add liburlparser?
At that point I would suggest that Debian just forks nfs-utils and
yanks the whole libxml&liburlparser garbage out and replace it with a
simple line parser. Does the same job and doesn't litter Debian
This is a political screed rather than a technical concern. For one
thing, a fork certainly isn't needed to remove libxml2 or any other
library dependency -- all distributors carry local patches to such
packages.
In any event, I had thought that the Linux community preferred to
de-duplicate common functionality like this. If distributions want a
less secure, harder-to-maintain solution, then they are welcome to
speak up and explain themselves. That's what the review process is for.
--
Chuck Lever
