From: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
To: buildroot@busybox.net
Subject: [Buildroot] [V3 2/2] dropbear: unbundle libtomath & libtomcrypt
Date: Wed, 21 Mar 2018 21:22:55 +0100 [thread overview]
Message-ID: <20180321212255.20f2e2bc@windsurf> (raw)
In-Reply-To: <20180321201608.jrkkauvpiwcla6js@tarshish>
Hello,
On Wed, 21 Mar 2018 22:16:08 +0200, Baruch Siach wrote:
> Here is my full commit on v2:
>
> Since both libraries are static only, this does not reduce the binary size. On
> the other hand, bundled libraries are more likely to work correctly with any
> give version of dropbear. The only benefit of using external libraries is when
> there is a security update to the libraries. But unless there is a known issue
> now, I'm not sure it's worth it.
>
> Do you see other reasons to prefer unbundling?
Well, exactly the one you mention: security issues.
In fact, I think you're putting the problem in the wrong direction. I
would rather say: "Unless there is a good reason to not use external
libraries, we should use external libraries rather than bundled ones".
Best regards,
Thomas
--
Thomas Petazzoni, CTO, Bootlin (formerly Free Electrons)
Embedded Linux and Kernel engineering
https://bootlin.com
next prev parent reply other threads:[~2018-03-21 20:22 UTC|newest]
Thread overview: 13+ messages / expand[flat|nested] mbox.gz Atom feed top
2018-03-21 16:03 [Buildroot] [V3 1/2] dropbear: bump to version 2018.76 Francois Perrad
2018-03-21 16:03 ` [Buildroot] [V3 2/2] dropbear: unbundle libtomath & libtomcrypt Francois Perrad
2018-03-21 17:04 ` Baruch Siach
2018-03-21 20:13 ` Thomas Petazzoni
2018-03-21 20:16 ` Baruch Siach
2018-03-21 20:22 ` Thomas Petazzoni [this message]
2018-03-22 5:36 ` Baruch Siach
2018-03-23 4:15 ` François Perrad
2018-03-23 6:16 ` Baruch Siach
2018-03-26 20:18 ` [Buildroot] [V3 1/2] dropbear: bump to version 2018.76 Thomas Petazzoni
2018-03-28 7:57 ` François Perrad
2018-03-28 8:01 ` Thomas Petazzoni
2018-03-28 8:42 ` François Perrad
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20180321212255.20f2e2bc@windsurf \
--to=thomas.petazzoni@bootlin.com \
--cc=buildroot@busybox.net \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.