Gentoo Archives: gentoo-dev

From: Michael Orlitzky <mjo@g.o>
To: gentoo-dev@l.g.o
Subject: Re: [gentoo-dev] Vanilla sources
Date: Sun, 05 Jan 2020 16:41:30
Message-Id: 817a5462-9ed9-838a-f6bd-f715d790768f@gentoo.org
In Reply to: Re: [gentoo-dev] Vanilla sources by Rolf Eike Beer
1 On 1/4/20 2:13 PM, Rolf Eike Beer wrote:
2 >
3 > Bad idea. If you wonder why: eshowkw dev-lang/rust.
4 >
5
6 Or consider that every rust package in Gentoo bundles hundreds of
7 libraries. We'd be fixing one security issue by introducing 10x more.
8
9 Not that rewriting it in rust would fix anything; writing it in C is
10 only a solution insofar as it makes the window to exploit the race
11 condition is as small as possible.