[Pkg-clamav-devel] Verbatim copy of zlib code in libclamav

Stephen Gran sgran at debian.org
Mon Mar 16 08:57:06 UTC 2009


This one time, at band camp, Michael Tautschnig said:
> Hi all,
> 
> (thread was started on pkg-clamav-devel)
> 
> > Michael Tautschnig wrote:
> > > Hi all,
> > > 
> > > In libclamav/inflate64.c now there is code that is in parts a verbatim copy of
> > > zlib's code. It contains the proper copyright and attribution information, but
> > > lintian and possibly also the security team gets mad at us because of the
> > > verbatim copy of zlib code. Now of course it is modified as deemed necessary to
> > > serve their purpose, and as such we cannot get rid of it. Is it ok to just add a
> > > lintian override?
> > 
> > Hi Michael,
> > unfortunately I think there's no other way around that.
> > Upstream's not interesed in the needed hacks, and for a reason, and
> > fiddling with the interal status of the zlib state machine makes it a
> > nightmare to maintain across zlib versions.
> > In the end decision was to ship the hacked zlib.
> 
> Is it acceptable to override the lintian error in this case?

I think so, yes.  An error we're not going should be silenced (although
not forgotten about).

Cheers,
-- 
 -----------------------------------------------------------------
|   ,''`.                                            Stephen Gran |
|  : :' :                                        sgran at debian.org |
|  `. `'                        Debian user, admin, and developer |
|    `-                                     http://www.debian.org |
 -----------------------------------------------------------------
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: Digital signature
Url : http://lists.alioth.debian.org/pipermail/pkg-clamav-devel/attachments/20090316/382454e9/attachment.pgp 


More information about the Pkg-clamav-devel mailing list