Hello,

Including Windows binaries with Sage's source code distribution
(sage-x.y.z.tar) is bad, in my opinion, because binaries can hide
viruses, especially Microsoft Windows binaries.  We are currently
shipping some, because of GAP.

This email concerns the gap-4.4.12.p1 spkg that is included in
Sage-4.4.tar (and I guess earlier versions of Sage since February).
I'm not sure exactly what happened, but David Joyner and I screwed up
bigtime giving that a positive review.   That package adds a bunch of
Windows binaries to the GAP spkg.     The Sage source tarball must
absolutely never contains windows binaries.

So, for future reference (and I'm talking about me here too), people
please be careful to check this sort of thing.   And please be
especially careful with updating the GAP spkg.  It's upstream I think
that includes these binaries in the "source" file: gap4r4p12.tar.bz2
(see [1] below).  (I'm cc'ing upstream, in the hopes they will stop
shipping windows binaries with their source distribution.)

See blocker ticket http://trac.sagemath.org/sage_trac/ticket/8774
which is about removing this stuff from the GAP spkg.

(And volunteers to write something so that this sort of thing can't
happen again... welcome!)

 -- William

[1]
wst...@boxen:/tmp$ wget
ftp://ftp.gap-system.org/pub/gap/gap44/tar.bz2/gap4r4p12.tar.bz2
--16:48:48--  ftp://ftp.gap-system.org/pub/gap/gap44/tar.bz2/gap4r4p12.tar.bz2
           => `gap4r4p12.tar.bz2'
Resolving ftp.gap-system.org... 138.251.192.244
Connecting to ftp.gap-system.org|138.251.192.244|:21... connected.
Logging in as anonymous ... Logged in!
==> SYST ... done.    ==> PWD ... done.
==> TYPE I ... done.  ==> CWD /pub/gap/gap44/tar.bz2 ... done.
==> PASV ... done.    ==> RETR gap4r4p12.tar.bz2 ... done.
Length: 47,715,810 (46M) (unauthoritative)

100%[=============================================================================>]
47,715,810   207.40K/s    ETA 00:00

16:52:19 (224.11 KB/s) - `gap4r4p12.tar.bz2' saved [47715810]

wst...@boxen:/tmp$ tar jxvf gap4r4p12.tar.bz2
gap4r4/
gap4r4/etc/
gap4r4/etc/GPL
gap4r4/etc/gap_indent.vim
gap4r4/etc/xrmtcmd.c
gap4r4/etc/README.vim-utils
gap4r4/etc/emacs/
gap4r4/etc/emacs/gap-mode.doc
gap4r4/etc/emacs/gap-mode.el
gap4r4/etc/emacs/comint.el
gap4r4/etc/emacs/gap-process.el
gap4r4/etc/debug.vim
gap4r4/etc/debugvim.txt
gap4r4/etc/gap.vim
gap4r4/description4r4p7
gap4r4/bin/
gap4r4/bin/libW11.dll
gap4r4/bin/gapp.pif
gap4r4/bin/regtool.exe
gap4r4/bin/gapp.bat
gap4r4/bin/gap.dll
gap4r4/bin/i686-pc-cygwin-gcc/
gap4r4/bin/i686-pc-cygwin-gcc/gap.dll
gap4r4/bin/i686-pc-cygwin-gcc/gac
gap4r4/bin/i686-pc-cygwin-gcc/config.h
gap4r4/bin/gapw95.exe
gap4r4/bin/gapicon.bmp
gap4r4/bin/gapw95p.exe
gap4r4/bin/usemem.bat
gap4r4/bin/cygpanel-8.dll
gap4r4/bin/cygncurses-8.dll
gap4r4/bin/rxvt.exe
gap4r4/bin/gap.pif
gap4r4/bin/cygwin1.dll
gap4r4/bin/gap.bat
gap4r4/bin/gaprxvt.bat
gap4r4/grp/


-- 
William Stein
Professor of Mathematics
University of Washington
http://wstein.org

-- 
To post to this group, send an email to sage-devel@googlegroups.com
To unsubscribe from this group, send an email to 
sage-devel+unsubscr...@googlegroups.com
For more options, visit this group at http://groups.google.com/group/sage-devel
URL: http://www.sagemath.org

Reply via email to