oxidecomputer / oxidecomputer/garbage-compactor

libxmlsec1 is a den of iniquity

Open
#9 1 comment 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Dominant language
Shell
Stars
12
Forks
1
Avg merge
1h 1m
Merged PRs (30d)
2

Description

According to XML Security Library News, the XML Security Library 1.3.0 release includes the following changes (trimmed to point out the relevant criminal activity):

  • core xmlsec and all xmlsec-crypto libraries:
    • (ABI breaking change) ...
    • (ABI breaking change) ...
    • (API breaking change) ...
    • (API breaking change) ...
    • (API breaking change) ...
    • (API/ABI breaking change) ...
    • (ABI breaking change) ...
    • (ABI breaking change) ...
    • ...
  • xmlsec-openssl library:
    • ...
    • (ABI breaking change) ...
    • (ABI breaking change) ...
    • ...
  • xmlsec command line utility:
    • (API breaking change) ...
    • (API breaking change) ...
    • ...

Literally no preparation for this has been made:

$ elfdump /usr/lib/libxmlsec1*so | grep SONAME
      [13]  SONAME            0x4ad2              libxmlsec1-openssl.so.1
      [11]  SONAME            0x6706              libxmlsec1.so.1

Sigh.

Contributor guide

No contributing guide indexed for this repository

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start by reading the repository's build scripts and checking the libxmlsec1 and libxmlsec1-openssl SONAME output with elfdump. Determine how the scripts handle the XML Security Library 1.3.0 API and ABI changes; done means the relevant build or packaging checks account for the changed library interface.

Written by the indexing model from the issue text.

Assessment

Tech stack
shell
Domain
build-system
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.