Re: Boost compilation problem

2014-10-24 Thread Christian Stimming
Zitat von Derek Atkins : This works well because generally code that targets an older version of a dependency will usually still work when compiled against a newer version of that dependency. So if we target version 1.48 of libFoo it will generally still work with version 1.50 of libFoo that an

Re: Security implications of loading custom reports

2014-10-24 Thread Derek Atkins
John Ralls writes: > On Oct 23, 2014, at 9:25 AM, Derek Atkins wrote: > >> John Ralls writes: >> I'm not sure this is possible in guile only. A report is written as a guile module. Loading the module already executes code (gnc:define-report). That code can be abused do bad thing

Re: Boost compilation problem

2014-10-24 Thread Derek Atkins
Christian Stimming writes: > Zitat von Derek Atkins : >> This works well because generally code that targets an older version of >> a dependency will usually still work when compiled against a newer >> version of that dependency. So if we target version 1.48 of libFoo it >> will generally still

Re: Security implications of loading custom reports

2014-10-24 Thread John Ralls
> On Oct 24, 2014, at 7:29 AM, Derek Atkins wrote: > > John Ralls writes: > >> On Oct 23, 2014, at 9:25 AM, Derek Atkins wrote: >> >>> John Ralls writes: >>> > I'm not sure this is possible in guile only. A report is written as > a guile module. Loading the module already executes

Re: Boost compilation problem

2014-10-24 Thread Aaron Laws
On Fri, Oct 24, 2014 at 11:10 AM, Derek Atkins wrote: > > As for compiling boost from source, the question isn't whether they can, > but whether they can make it co-exist with the distributions' version. > > Just to be clear, if I'm understanding correctly, this is done by building boost with ./b

Re: Boost compilation problem

2014-10-24 Thread John Ralls
> On Oct 24, 2014, at 8:10 AM, Derek Atkins wrote: > > Christian Stimming writes: > >> Zitat von Derek Atkins : >>> This works well because generally code that targets an older version of >>> a dependency will usually still work when compiled against a newer >>> version of that dependency. So

Re: Boost compilation problem

2014-10-24 Thread Chris Good
Nice one Derek :-) Sorry Aaron, while I don't have a problem with you believing something different to me, it is annoying to be subjected to your personal beliefs on every email from you. Regards, Chris Good > On 25 Oct 2014, at 3:00 am, gnucash-devel-requ...@gnucash.org wrote: > > Send gnuc