[jira] [Commented] (XERCESC-2257) symbol not found in flat namespace (_xercesc_messages_3_2_dat)

    [ https://issues.apache.org/jira/browse/XERCESC-2257?page=3Dcom.atlassi=
an.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=3D17=
898834#comment-17898834 ]=20

Boris Kolpackov commented on XERCESC-2257:
------------------------------------------

> If you honestly think there are not a significant nunber of unfound issue=
s at this point

I am 100% certain there are. But so is the case with most C/C++ code bases,=
 actively or not actively maintained. Again, take Expat as an example: ever=
y release it fixes some CVEs. I think that's a pretty strong evidence that =
in the future releases there will be more "unfound issues". It does not mat=
ter whether the "code base seeing analysis and getting attention", you are =
pretty much guaranteed Expat is vulnerable at any given point in time.

> Do I think it's safe for much of anything? No, I don't.

I asked you a specific question and you give a wishy-washy answer like this=
? There is a large number of applications that use Xerces-C++ only for pars=
ing trusted input. What is the safety implication of this?

> All my statements are in all cases my own, and I will make that clear in =
the future.

Thank you, that would be appreciated. Also please let me know when you wish=
 to stop being a release manager so that we have some transition period for=
 me to take over.

> symbol not found in flat namespace (_xercesc_messages_3_2_dat)
> --------------------------------------------------------------
>
>                 Key: XERCESC-2257
>                 URL: https://issues.apache.org/jira/browse/XERCESC-2257
>             Project: Xerces-C++
>          Issue Type: Bug
>    Affects Versions: 3.3.0
>            Reporter: Ryan Carsten Schmidt
>            Priority: Major
>
> Software linking with libxerces-c-3.3.dylib fails to work:
> =C2=A0
> {noformat}
> dyld[5155]: symbol not found in flat namespace (_xercesc_messages_3_2_dat=
)
> {noformat}
> =C2=A0
> This was reported to MacPorts here: [https://trac.macports.org/ticket/713=
04]
> This is a regression; 3.2.4 didn't have this problem.
> Surely for version 3.3.x on these lines {{3_2}} should be changed to {{{}=
3_3{}}}?
> [https://github.com/apache/xerces-c/blob/v3.3.0/src/xercesc/util/MsgLoade=
rs/ICU/ICUMsgLoader.cpp#L54-L55]



--
This message was sent by Atlassian Jira
(v8.20.10#820010)