Boost compilation problem

2014-10-23 Thread Aaron Laws
I asked on IRC and was told that our targeted boost version is 1.48. There had been some minor dificulties with some of my commits recently because I was using boost 1.56, so I thought it would be best to use the officially targeted version. Now I'm using boost version 1.48 (from boost version cont

Re: Security implications of loading custom reports

2014-10-23 Thread Derek Atkins
John Ralls writes: >> I'm not sure this is possible in guile only. A report is written as >> a guile module. Loading the module already executes code >> (gnc:define-report). That code can be abused do bad things when >> loading a custom report. > > Wow. That’s an incredible failure for something

Re: Boost compilation problem

2014-10-23 Thread Derek Atkins
Hi, Aaron Laws writes: > I asked on IRC and was told that our targeted boost version is 1.48. There > had been some minor dificulties with some of my commits recently because I > was using boost 1.56, so I thought it would be best to use the officially > targeted version. Now I'm using boost ver

Re: Security implications of loading custom reports

2014-10-23 Thread John Ralls
On Oct 23, 2014, at 9:25 AM, Derek Atkins wrote: > John Ralls writes: > >>> I'm not sure this is possible in guile only. A report is written as >>> a guile module. Loading the module already executes code >>> (gnc:define-report). That code can be abused do bad things when >>> loading a custom