FAQ Search Today's Posts Mark Forums Read
» Video Reviews

» Linux Archive

Linux-archive is a website aiming to archive linux email lists and to make them easily accessible for linux users/developers.


» Sponsor

» Partners

» Sponsor

Go Back   Linux Archive > Redhat > Fedora Development

 
 
LinkBack Thread Tools
 
Old 09-29-2010, 04:29 PM
Chen Lei
 
Default xulrunner 2.0 in rawhide (F15) bundles several system libs

2010/9/29 Martin Stransky <stransky@redhat.com>:
> There's a new xulrunner/firefox in rawhide. The API (js too) is slightly
> incompatible with the 1.9.2, there is a new XPCOM modules registration
> and so on, see:
>
> https://bugzilla.redhat.com/show_bug.cgi?id=634596#c3
> https://developer.mozilla.org/en/Firefox_4_for_developers
> https://developer.mozilla.org/en/XPCOM/XPCOM_changes_in_Gecko_2.0
>
> ma.
> --
Hi Martin,


It seems xulrunner bundles several system libs, do you intend to
unbundle those libs?


e.g. media/libvpx media/libvorbis modules/libimg/png

Regards,
Chen Lei
--
devel mailing list
devel@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/devel
 
Old 09-29-2010, 10:23 PM
Dominik 'Rathann' Mierzejewski
 
Default xulrunner 2.0 in rawhide (F15) bundles several system libs

On Wednesday, 29 September 2010 at 18:29, Chen Lei wrote:
> 2010/9/29 Martin Stransky <stransky@redhat.com>:
> > There's a new xulrunner/firefox in rawhide. The API (js too) is slightly
> > incompatible with the 1.9.2, there is a new XPCOM modules registration
> > and so on, see:
> >
> > https://bugzilla.redhat.com/show_bug.cgi?id=634596#c3
> > https://developer.mozilla.org/en/Firefox_4_for_developers
> > https://developer.mozilla.org/en/XPCOM/XPCOM_changes_in_Gecko_2.0
>
> It seems xulrunner bundles several system libs, do you intend to
> unbundle those libs?
>
> e.g. media/libvpx media/libvorbis modules/libimg/png

I'd say the question should be not "if", but "when". Otherwise it's
a violation of the packaging guidelines.

Regards,
Dominik

--
Fedora http://fedoraproject.org/wiki/User:Rathann
RPMFusion http://rpmfusion.org | MPlayer http://mplayerhq.hu
"Faith manages."
-- Delenn to Lennier in Babylon 5:"Confessions and Lamentations"
--
devel mailing list
devel@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/devel
 
Old 09-30-2010, 02:10 AM
Takanori MATSUURA
 
Default xulrunner 2.0 in rawhide (F15) bundles several system libs

Hi Chen,

For modules/libimg/png, mozilla products use aPNG which was rejected
by upstream.
http://en.wikipedia.org/wiki/APNG

So we have to use internal png.


For media/libvorbis, mozilla has custom patches in the source tree.
https://bugzilla.mozilla.org/show_bug.cgi?id=517422


Fro media/libvpx, I don't know well. However you are welcome to file
the issue to bugzilla.mozilla.org.


Takanori
--
devel mailing list
devel@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/devel
 
Old 09-30-2010, 03:44 AM
Gregory Maxwell
 
Default xulrunner 2.0 in rawhide (F15) bundles several system libs

On Wed, Sep 29, 2010 at 10:10 PM, Takanori MATSUURA <t.matsuu@gmail.com> wrote:
> Hi Chen,
>
> For modules/libimg/png, mozilla products use aPNG which was rejected
> by upstream.
> http://en.wikipedia.org/wiki/APNG
>
> So we have to use internal png.
>
> For media/libvorbis, mozilla has custom patches in the source tree.
> https://bugzilla.mozilla.org/show_bug.cgi?id=517422
>
> Fro media/libvpx, I don't know well. However you are welcome to file
> the issue to bugzilla.mozilla.org.

Mozilla isn't always great about getting changes pushed upstream.

I just committed the relevant patch they had outstanding against
libvorbis to the libvorbis svn, though I'm not sure when we'll cut
another official libvorbis release.

(They also have a patch for building on Solaris‚ÄĒ which seems to be due
to not using the normal build system for libvorbis. I'm pretty
confident that it's irrelevant for Fedora).
--
devel mailing list
devel@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/devel
 
Old 09-30-2010, 09:37 AM
Takanori MATSUURA
 
Default xulrunner 2.0 in rawhide (F15) bundles several system libs

If someone implement
--enable-system-libvpx
--enable-system-vorbis
--enable-system-ogg
--enable-system-theora
into the mozilla source, we can easily remove source for the
libraries. And Fedora will be happy. :-)


Takanori
--
devel mailing list
devel@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/devel
 
Old 09-30-2010, 12:19 PM
Sven Lankes
 
Default xulrunner 2.0 in rawhide (F15) bundles several system libs

On Thu, Sep 30, 2010 at 06:37:33PM +0900, Takanori MATSUURA wrote:

> If someone implement
> --enable-system-libvpx
> --enable-system-vorbis
> --enable-system-ogg
> --enable-system-theora
> into the mozilla source, we can easily remove source for the
> libraries. And Fedora will be happy. :-)

https://bugzilla.mozilla.org/show_bug.cgi?id=577653

Looking at how rigorous new packages with bundled libs are fought we
should really stop shipping firefox and start shipping Iceweasel.

--
sven === jabber/xmpp: sven@lankes.net
--
devel mailing list
devel@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/devel
 
Old 09-30-2010, 04:15 PM
Toshio Kuratomi
 
Default xulrunner 2.0 in rawhide (F15) bundles several system libs

On Thu, Sep 30, 2010 at 02:19:02PM +0200, Sven Lankes wrote:
> On Thu, Sep 30, 2010 at 06:37:33PM +0900, Takanori MATSUURA wrote:
>
> > If someone implement
> > --enable-system-libvpx
> > --enable-system-vorbis
> > --enable-system-ogg
> > --enable-system-theora
> > into the mozilla source, we can easily remove source for the
> > libraries. And Fedora will be happy. :-)
>
> https://bugzilla.mozilla.org/show_bug.cgi?id=577653
>
> Looking at how rigorous new packages with bundled libs are fought we
> should really stop shipping firefox and start shipping Iceweasel.
>
https://fedorahosted.org/fesco/ticket/472

-Toshio
--
devel mailing list
devel@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/devel
 
Old 09-30-2010, 05:09 PM
Christopher Aillon
 
Default xulrunner 2.0 in rawhide (F15) bundles several system libs

On 09/30/2010 05:19 AM, Sven Lankes wrote:
> On Thu, Sep 30, 2010 at 06:37:33PM +0900, Takanori MATSUURA wrote:
>
>> If someone implement
>> --enable-system-libvpx
>> --enable-system-vorbis
>> --enable-system-ogg
>> --enable-system-theora
>> into the mozilla source, we can easily remove source for the
>> libraries. And Fedora will be happy. :-)
>
> https://bugzilla.mozilla.org/show_bug.cgi?id=577653
>
> Looking at how rigorous new packages with bundled libs are fought we
> should really stop shipping firefox and start shipping Iceweasel.

I personally don't care what we call it. I'm not going to start
breaking funny cat videos just to meet packaging ideals on a deadline.
I'd rather deal with all you guys complaining on fedora-devel and in
fesco tickets than the influx of bugs if I started breaking shit. It's
bad enough that there are more bugs than we can handle. Besides,
Mozilla has a good track record of allowing system libs after things
settle down, and I have no doubt that we'll get these at some point.

From Mozilla's perspective, they could:

1. Do what they are doing now, temporarily not allow a few new system
libs, waiting until they get banged into shape and *then* enable system
libs (down the road).
2. Bang on the code in private and wait until it meets every Fedora
packaging guideline, etc, until committing to the upstream repository,
so we all get to wait for all of the cool shit that's happening.

Please note that we're talking about pre-release versions of Firefox in
a pre-release version of Fedora anyway, so a lot of churn is to be
expected. We're almost certainly going to have to temporarily disable
and reenable a lot of other system libs during the beta cycles to get
builds out the door, just like we always do in rawhide. Not that I can
guarantee that the release version will have all the above system libs
enabled, but we'll know a lot more closer to FF4 and F15 release time.
--
devel mailing list
devel@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/devel
 
Old 09-30-2010, 05:29 PM
Gregory Maxwell
 
Default xulrunner 2.0 in rawhide (F15) bundles several system libs

On Thu, Sep 30, 2010 at 1:09 PM, Christopher Aillon <caillon@redhat.com> wrote:
> On 09/30/2010 05:19 AM, Sven Lankes wrote:
>> On Thu, Sep 30, 2010 at 06:37:33PM +0900, Takanori MATSUURA wrote:
>>
>>> If someone implement
>>> --enable-system-libvpx
>>> --enable-system-vorbis
>>> --enable-system-ogg
>>> --enable-system-theora
>>> into the mozilla source, we can easily remove source for the
>>> libraries. And Fedora will be happy. :-)
>>
>> https://bugzilla.mozilla.org/show_bug.cgi?id=577653
>>
>> Looking at how rigorous new packages with bundled libs are fought we
>> should really stop shipping firefox and start shipping Iceweasel.
>
> I personally don't care what we call it. ¬*I'm not going to start
> breaking funny cat videos just to meet packaging ideals on a deadline.
> I'd rather deal with all you guys complaining on fedora-devel and in
> fesco tickets than the influx of bugs if I started breaking shit. ¬*It's
> bad enough that there are more bugs than we can handle. ¬*Besides,
> Mozilla has a good track record of allowing system libs after things
> settle down, and I have no doubt that we'll get these at some point.
>
> ¬*From Mozilla's perspective, they could:
>
> 1. Do what they are doing now, temporarily not allow a few new system
> libs, waiting until they get banged into shape and *then* enable system
> libs (down the road).
> 2. Bang on the code in private and wait until it meets every Fedora
> packaging guideline, etc, until committing to the upstream repository,
> so we all get to wait for all of the cool shit that's happening.
>
> Please note that we're talking about pre-release versions of Firefox in
> a pre-release version of Fedora anyway, so a lot of churn is to be
> expected. ¬*We're almost certainly going to have to temporarily disable
> and reenable a lot of other system libs during the beta cycles to get
> builds out the door, just like we always do in rawhide. ¬*Not that I can
> guarantee that the release version will have all the above system libs
> enabled, but we'll know a lot more closer to FF4 and F15 release time.


I yelled pretty loudly when Fedora first packaged libvpx because
fedora took a _known vulnerable_ version which Mozilla and opera were
patching around but where the upstream hadn't yet merged the fixes.

Things are more mature now but there are still somewhat scary fixes
happening, at least with the platform dependant code:
https://review.webmproject.org/#change,603


Mozilla being a vector for the widescale exploitation would be
terrible for their image‚ÄĒ and also terrible for Fedora's, we really
don't want to create our own version of the debian openssl rng bug.
There really is a common interest here and the folks on the Mozilla
side are better informed about the risks.

The patches mozilla is carrying are visible as files in the respective
directories here:
http://mxr.mozilla.org/mozilla-central/source/media/

I'd suggest that fedora folks interested in the bundling help by
making sure that the applicable fixes make it upstream. Even if Fedora
were to ditch the trademarks you couldn't escape doing this work.
--
devel mailing list
devel@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/devel
 
Old 09-30-2010, 06:22 PM
Toshio Kuratomi
 
Default xulrunner 2.0 in rawhide (F15) bundles several system libs

On Thu, Sep 30, 2010 at 01:29:38PM -0400, Gregory Maxwell wrote:
>
> I yelled pretty loudly when Fedora first packaged libvpx because
> fedora took a _known vulnerable_ version which Mozilla and opera were
> patching around but where the upstream hadn't yet merged the fixes.
>
> Things are more mature now but there are still somewhat scary fixes
> happening, at least with the platform dependant code:
> https://review.webmproject.org/#change,603
>
>
> Mozilla being a vector for the widescale exploitation would be
> terrible for their image‚ÄĒ and also terrible for Fedora's, we really
> don't want to create our own version of the debian openssl rng bug.
> There really is a common interest here and the folks on the Mozilla
> side are better informed about the risks.
>
> The patches mozilla is carrying are visible as files in the respective
> directories here:
> http://mxr.mozilla.org/mozilla-central/source/media/
>
> I'd suggest that fedora folks interested in the bundling help by
> making sure that the applicable fixes make it upstream. Even if Fedora
> were to ditch the trademarks you couldn't escape doing this work.
>
Note that even without unbundling we have to do this work anyway -- but we
have to do it (or at least verify that it's done) twice, once in libvpx and
once in firefox. It sounds from your post that one problem is that the
libvpx maintainer has a volatile code base with multiple sources to pull
code from but is only paying attention to a subset of those.

-Toshio
--
devel mailing list
devel@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/devel
 

Thread Tools




All times are GMT. The time now is 11:54 PM.

VBulletin, Copyright ©2000 - 2014, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO ©2007, Crawlability, Inc.
Copyright ©2007 - 2008, www.linux-archive.org