Re: shortest path to bootstrap gauche?
Jens Thiele <[email protected]> Sun, 24 Nov 2024 11:54:38 +0100
| Newsgroups | gmane.lisp.scheme.gauche |
|---|---|
| Message-ID | <[email protected]> |
Shiro Kawai <[email protected]> writes: > IIRC, earlier versions of Gauche required STk. It won't be very simple to > retrace everything. > What is it for? How I ended up there: During fixing the reproducible build issue (https://github.com/shirok/Gauche/issues/1080) you changed libobj.scm. To apply this change to the debian package I have to run precomp of the previous gauche version to produce a new libobj.c. I then could add a patch updating libobj.c to the debian package. Of course this patch is unreadable (by a human). Now my host could be compromised and the new libobj.c could contain a backdoor? Of course I could just wait for you to make a new release but similarly one could argue that the generated files in the release tar ball could be backdoored, too? Or did I end up in the wrong rabbit hole? Best regards Jens