Re: shortest path to bootstrap gauche?

Jens Thiele <[email protected]> Sun, 24 Nov 2024 11:54:38 +0100
Newsgroups gmane.lisp.scheme.gauche
Message-ID <[email protected]>
Shiro Kawai <[email protected]> writes:

> IIRC, earlier versions of Gauche required STk.  It won't be very simple to
> retrace everything.
> What is it for?

How I ended up there:

During fixing the reproducible build issue
(https://github.com/shirok/Gauche/issues/1080) you changed
libobj.scm. To apply this change to the debian package I have to run
precomp of the previous gauche version to produce a new libobj.c. I then
could add a patch updating libobj.c to the debian package. Of course
this patch is unreadable (by a human). Now my host could be compromised
and the new libobj.c could contain a backdoor? Of course I could just
wait for you to make a new release but similarly one could argue that the
generated files in the release tar ball could be backdoored, too?

Or did I end up in the wrong rabbit hole?

Best regards
Jens