Hi William, I'll clean this up. When I was preparing it I was wondering whether that Windows stuff must be dropped, but as noone objected it remained there :)
Best, Dima On 27 April 2010 07:54, William Stein <wst...@gmail.com> wrote: > Hello, > > Including Windows binaries with Sage's source code distribution > (sage-x.y.z.tar) is bad, in my opinion, because binaries can hide > viruses, especially Microsoft Windows binaries. We are currently > shipping some, because of GAP. > > This email concerns the gap-4.4.12.p1 spkg that is included in > Sage-4.4.tar (and I guess earlier versions of Sage since February). > I'm not sure exactly what happened, but David Joyner and I screwed up > bigtime giving that a positive review. That package adds a bunch of > Windows binaries to the GAP spkg. The Sage source tarball must > absolutely never contains windows binaries. > > So, for future reference (and I'm talking about me here too), people > please be careful to check this sort of thing. And please be > especially careful with updating the GAP spkg. It's upstream I think > that includes these binaries in the "source" file: gap4r4p12.tar.bz2 > (see [1] below). (I'm cc'ing upstream, in the hopes they will stop > shipping windows binaries with their source distribution.) > > See blocker ticket http://trac.sagemath.org/sage_trac/ticket/8774 > which is about removing this stuff from the GAP spkg. > > (And volunteers to write something so that this sort of thing can't > happen again... welcome!) > > -- William > > [1] > wst...@boxen:/tmp$ wget > ftp://ftp.gap-system.org/pub/gap/gap44/tar.bz2/gap4r4p12.tar.bz2 > --16:48:48-- ftp://ftp.gap-system.org/pub/gap/gap44/tar.bz2/gap4r4p12.tar.bz2 > => `gap4r4p12.tar.bz2' > Resolving ftp.gap-system.org... 138.251.192.244 > Connecting to ftp.gap-system.org|138.251.192.244|:21... connected. > Logging in as anonymous ... Logged in! > ==> SYST ... done. ==> PWD ... done. > ==> TYPE I ... done. ==> CWD /pub/gap/gap44/tar.bz2 ... done. > ==> PASV ... done. ==> RETR gap4r4p12.tar.bz2 ... done. > Length: 47,715,810 (46M) (unauthoritative) > > 100%[=============================================================================>] > 47,715,810 207.40K/s ETA 00:00 > > 16:52:19 (224.11 KB/s) - `gap4r4p12.tar.bz2' saved [47715810] > > wst...@boxen:/tmp$ tar jxvf gap4r4p12.tar.bz2 > gap4r4/ > gap4r4/etc/ > gap4r4/etc/GPL > gap4r4/etc/gap_indent.vim > gap4r4/etc/xrmtcmd.c > gap4r4/etc/README.vim-utils > gap4r4/etc/emacs/ > gap4r4/etc/emacs/gap-mode.doc > gap4r4/etc/emacs/gap-mode.el > gap4r4/etc/emacs/comint.el > gap4r4/etc/emacs/gap-process.el > gap4r4/etc/debug.vim > gap4r4/etc/debugvim.txt > gap4r4/etc/gap.vim > gap4r4/description4r4p7 > gap4r4/bin/ > gap4r4/bin/libW11.dll > gap4r4/bin/gapp.pif > gap4r4/bin/regtool.exe > gap4r4/bin/gapp.bat > gap4r4/bin/gap.dll > gap4r4/bin/i686-pc-cygwin-gcc/ > gap4r4/bin/i686-pc-cygwin-gcc/gap.dll > gap4r4/bin/i686-pc-cygwin-gcc/gac > gap4r4/bin/i686-pc-cygwin-gcc/config.h > gap4r4/bin/gapw95.exe > gap4r4/bin/gapicon.bmp > gap4r4/bin/gapw95p.exe > gap4r4/bin/usemem.bat > gap4r4/bin/cygpanel-8.dll > gap4r4/bin/cygncurses-8.dll > gap4r4/bin/rxvt.exe > gap4r4/bin/gap.pif > gap4r4/bin/cygwin1.dll > gap4r4/bin/gap.bat > gap4r4/bin/gaprxvt.bat > gap4r4/grp/ > > > -- > William Stein > Professor of Mathematics > University of Washington > http://wstein.org > -- Dmitrii Pasechnik ----- DISCLAIMER: Any text following this sentence does not constitute a part of this message, and was added automatically during transmission. -- To post to this group, send an email to sage-devel@googlegroups.com To unsubscribe from this group, send an email to sage-devel+unsubscr...@googlegroups.com For more options, visit this group at http://groups.google.com/group/sage-devel URL: http://www.sagemath.org
