RE: [PHP-DEV] Replaced the bundled libgd with upstream (aka. system)libgd

2018-02-12 Thread Anatol Belski
Hi, > -Original Message- > From: Christoph M. Becker [mailto:cmbecke...@gmx.de] > Sent: Wednesday, February 7, 2018 11:51 PM > To: Stanislav Malyshev ; PHP Internals > > Subject: Re: [PHP-DEV] Replaced the bundled libgd with upstream (aka. > system)libgd >

Re: [PHP-DEV] Replaced the bundled libgd with upstream (aka. system)libgd

2018-02-07 Thread Christoph M. Becker
On 07.02.2018 at 21:04, Stanislav Malyshev wrote: >> bundled libgd)[5]. Another important difference is that our bundled >> libgd uses ZendMM, but upstream libgd does not[6]. > > This one we need to find a solution for. GD is often exposed to the > unfiltered user input, has a potential to consu

Re: [PHP-DEV] Replaced the bundled libgd with upstream (aka. system) libgd

2018-02-07 Thread Stanislav Malyshev
Hi! > During the discussion of PR 3080[1] the idea to replace our bundled > libgd with an (unmodified) upstream libgd[2] has come up again. It > seems this issue deserves its own discussion, and probably an RFC. I think this is a good idea. In general, as open source ecosystem matures (and more