On 07/11/2012 01:12 AM, Hendrik Schwartke wrote:
>> + atime->tv_sec = sb.st_atime;
>> + mtime->tv_sec = sb.st_mtime;
>> + catime->tv_sec = sb.st_ctime;
>> +#if _BSD_SOURCE || _SVID_SOURCE
>> + atime->tv_nsec = sb.st_atim.tv_nsec;
> Yuck. I've nearly got consensus to use the gnulib stat-time module, in
> which case this would instead be the much simpler:
Ok, that sounds good. But what exactly does 'nearly' mean?
It means 3 of the 4 copyright holders have agreed, with less than
24-hour turnaround time; the 4th will likely respond sometime this week:
https://lists.gnu.org/archive/html/bug-gnulib/2012-07/msg00141.html
> But before we can use the gnulib stat-time module, we have to
update
> .gnulib and bootstrap.conf; and I'm holding off on the .gnulib update
> until after fixed Automake is available in at least Fedora 17 (right
> now, unless you are manually using automake 1.11.6 or newer, you are
> injecting a security bug into every other package that uses automake).
So any idea how long this will take?
Being a security patch that affects multiple packages, I'm sure it won't
be too long in the works.
--
Eric Blake eblake(a)redhat.com +1-919-301-3266
Libvirt virtualization library
http://libvirt.org