[LEDE-DEV] [PATCH 4/4] toolchain: musl: update to current HEAD

[Karl Palsson]

Christian Lamparter <chunkeey at gmail.com> wrote:
> Hello,
> 
> On Monday, November 20, 2017 8:17:05 AM CET Syrone Wong wrote:
> > Hi,
> > 
> > Any specific reason to introduce these changes?
> Actually yes. The LEDE Website prides itself with
> "LEDE is actively updated [...]"
> <https://lede-project.org/reasons_to_use_lede#security>

Actively updated is one, "we're going to be standing on the
bleeding edge at all times, you're gonna get cut" is another.
Musl is also making releases quite regularly, it's not even 20
days since 17, and only 30 since 16. Surely musl would be
considering a release too for these issues?

Cheers,
Karl P

> 
> a71b46cf fix malloc state corruption when ldso rejects loading
> a second libc The Thread on the MUSL ML is "[musl] diffutils
> crash in malloc". Judging from the descussion, it can cause
> programs to misbehave starting with 1.1.17 and 1.1.18.
> 
> And there's more:
> 72656157 fix fgetwc when decoding a character that crosses
> buffer boundary c21051e9 prevent fork's errno from being
> clobbered by atfork handlers
> ...
> 
> + some UAPI updates, which will be nice to have for 4.14 development.
> 
> And Also, Rich made big changes to iconv and it broke the
> 900-iconv_size_hack.patch.
> 
> Regards,
> Christian
> 
> _______________________________________________
> Lede-dev mailing list
> Lede-dev at lists.infradead.org
> http://lists.infradead.org/mailman/listinfo/lede-dev
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.html
Type: application/pgp-signature
Size: 1161 bytes
Desc: OpenPGP Digital Signature
URL: <http://lists.infradead.org/pipermail/lede-dev/attachments/20171120/0824b8c7/attachment-0001.sig>