[jira] [Commented] (XERCESC-2257) symbol not found in flat namespace (_xercesc_messages_3_2_dat)

    [ https://issues.apache.org/jira/browse/XERCESC-2257?page=3Dcom.atlassi=
an.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=3D17=
898638#comment-17898638 ]=20

Boris Kolpackov commented on XERCESC-2257:
------------------------------------------

> I'm not discarding it.

Well, you are: we have fixed the security issue (and so, as far as I know, =
there aren't any open ones at the moment), and you turn around and publicly=
 announce that Xerces-C++ is still not good enough and should be taken out =
back and shot.

> But we have very different opinons about what a "maintained and safe" cod=
e base means, and that's just not a bridgeable divide I expect.

But "safe" for what? Is Xerces-C++ safe to parse trusted input, in your opi=
nion? And in my opinion, no XML parser that wasn't explicitly designed from=
 the grounds up to be safe on untrusted input can be considered safe. Is Ex=
pat safe in your opinion? It gets a bunch CVEs fixes in pretty much every r=
elease. It is also the foundation of pretty much every Linux distribution. =
Should it also be take out back and shot, in your opinion?


> It's up to the macports folks to decide how to straddle that line obvious=
ly.

I don't personally care about MacPorts but I would ask you not to make simi=
lar statements in the future about the Xerces-C++ project and its future th=
at come across as the position of the project and not your personal opinion=
.

> symbol not found in flat namespace (_xercesc_messages_3_2_dat)
> --------------------------------------------------------------
>
>                 Key: XERCESC-2257
>                 URL: https://issues.apache.org/jira/browse/XERCESC-2257
>             Project: Xerces-C++
>          Issue Type: Bug
>    Affects Versions: 3.3.0
>            Reporter: Ryan Carsten Schmidt
>            Priority: Major
>
> Software linking with libxerces-c-3.3.dylib fails to work:
> =C2=A0
> {noformat}
> dyld[5155]: symbol not found in flat namespace (_xercesc_messages_3_2_dat=
)
> {noformat}
> =C2=A0
> This was reported to MacPorts here: [https://trac.macports.org/ticket/713=
04]
> This is a regression; 3.2.4 didn't have this problem.
> Surely for version 3.3.x on these lines {{3_2}} should be changed to {{{}=
3_3{}}}?
> [https://github.com/apache/xerces-c/blob/v3.3.0/src/xercesc/util/MsgLoade=
rs/ICU/ICUMsgLoader.cpp#L54-L55]



--
This message was sent by Atlassian Jira
(v8.20.10#820010)