<div dir="ltr"><div><div><div><div><div>Good morning<br><br></div>Having got latest Icecat building with the -Os switch, it seems there are some reports of [serious?] security issues with it.<br><br></div><div>Here is where I first read something:<br><a href="https://lists.gnu.org/archive/html/bug-gnuzilla/2016-08/msg00000.html">https://lists.gnu.org/archive/html/bug-gnuzilla/2016-08/msg00000.html</a><br><br></div><div>And I have seen further discussion and consternation about what to do with Icecat and perhaps not using Firefox as base etc.  I'm really relatively only a 'user' so to speak, so I'm interested to know what others feel....is there a serious security risk ?<br></div><div><br></div>I realise this is SBo and not an Icecat forum,  but I wonder what the contributors (and maintainer) on SBo feel about the reports being made; should it affect whether Icecat is on SBo if its known to be 'risky', or does it not matter, should comments be made [in the info] or is it up to anyone wanting to use it to be self-aware and generally any other comments to share.<br><br></div>If this list really is inappropriate for posts like this (whatever 'this' is), then just let me know.....but I would be interested in what more knowledgeable people on SBo feel ?<br><br><br></div>Thank you and good day to all.<br></div>Habs<br></div><div class="gmail_extra"><br><div class="gmail_quote">On 8 August 2016 at 23:16,  <span dir="ltr"><<a href="mailto:bch@shroggslodge.freeserve.co.uk" target="_blank">bch@shroggslodge.freeserve.co.uk</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr"><div><div><div><div>hi there all<br><br></div>I have tried the -Os switch and it does appear to remedy the problem. Icecat no longer crashes in the scenario(s) I have documented.<br><br></div>I wonder what the -O2 switch does differently to the -Os one.<br><br></div>So for now that does appear to be the 'fix'. Thank you all.<br><br><br></div>Habs<br><div><div><div><br></div></div></div></div><div class="gmail_extra"><br><div class="gmail_quote"><div><div class="h5">On 8 August 2016 at 20:36, Ryan P.C. McQuen <span dir="ltr"><<a href="mailto:ryan.q@linux.com" target="_blank">ryan.q@linux.com</a>></span> wrote:<br></div></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div><div class="h5"><span><br><br>On Monday, August 8, 2016, Ivan Zaigralin <<a href="mailto:melikamp@melikamp.com" target="_blank">melikamp@melikamp.com</a>> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">I still can't replicate any crash whatsoever, even in places where others<br>
report them. However, Matt tells me that crashes went away after he rebuilt<br>
with -Os. He also mentioned he's got an AMD Phenom, whereas I am using Intel<br>
CPU, which may explain why I am unable to hit this snag.<br>
<br>
I can certainly submit a fixed SlackBuild if there's a consensus -Os is an<br>
effective fix. Please let me know :)<br></blockquote><div><br></div></span><div>Seems like that would be valid, since Slackware's own Firefox build was passing that for version 43, and only removed it for versions past 43:</div><div><br></div><div>(Changelog reference):</div><div><br></div><span style="font-family:Times;font-size:small;background-color:rgb(254,254,254)">Wed Dec 23 22:44:58 UTC 2015</span><br style="font-family:Times;font-size:small;background-color:rgb(254,254,254)"><span style="font-family:Times;font-size:small;background-color:rgb(254,254,254)">a/lvm2-2.02.138-i586-1.txz: Upgraded.</span><br style="font-family:Times;font-size:small;background-color:rgb(254,254,254)"><span style="font-family:Times;font-size:small;background-color:rgb(254,254,254)">ap/ghostscript-9.18-i586-1.txz<wbr>: Upgraded.</span><br style="font-family:Times;font-size:small;background-color:rgb(254,254,254)"><span style="font-family:Times;font-size:small;background-color:rgb(254,254,254)">ap/lsof-4.89-i586-1.txz: Upgraded.</span><br style="font-family:Times;font-size:small;background-color:rgb(254,254,254)"><span style="font-family:Times;font-size:small;background-color:rgb(254,254,254)">l/pycups-1.9.73-i586-1.txz: Upgraded.</span><br style="font-family:Times;font-size:small;background-color:rgb(254,254,254)"><span style="font-family:Times;font-size:small;background-color:rgb(254,254,254)">l/pycurl-7.19.5.3-i586-1.txz: Upgraded.</span><br style="font-family:Times;font-size:small;background-color:rgb(254,254,254)"><span style="font-family:Times;font-size:small;background-color:rgb(254,254,254)">n/NetworkManager-1.0.10-i586-1<wbr>.txz: Upgraded.</span><br style="font-family:Times;font-size:small;background-color:rgb(254,254,254)"><span style="font-family:Times;font-size:small;background-color:rgb(254,254,254)">n/curl-7.46.0-i586-1.txz: Upgraded.</span><br style="font-family:Times;font-size:small;background-color:rgb(254,254,254)"><span style="font-family:Times;font-size:small;background-color:rgb(254,254,254)">n/links-2.12-i586-1.txz: Upgraded.</span><br style="font-family:Times;font-size:small;background-color:rgb(254,254,254)"><span style="font-family:Times;font-size:small;background-color:rgb(254,254,254)">n/obexfs-0.12-i486-1.txz: Removed.</span><br style="font-family:Times;font-size:small;background-color:rgb(254,254,254)"><span style="font-family:Times;font-size:small;background-color:rgb(254,254,254)">       This functionality is now included in the obexftp package.</span><br style="font-family:Times;font-size:small;background-color:rgb(254,254,254)"><span style="font-family:Times;font-size:small;background-color:rgb(254,254,254)">n/obexftp-0.24-i586-1.txz: Upgraded.</span><br style="font-family:Times;font-size:small;background-color:rgb(254,254,254)"><span style="font-family:Times;font-size:small;background-color:rgb(254,254,254)">       Thanks to Robby Workman.</span><br style="font-family:Times;font-size:small;background-color:rgb(254,254,254)"><span style="font-family:Times;font-size:small;background-color:rgb(254,254,254)">n/openobex-1.7.1-i586-1.txz: Upgraded.</span><br style="font-family:Times;font-size:small;background-color:rgb(254,254,254)"><span style="font-family:Times;font-size:small;background-color:rgb(254,254,254)">       Thanks to Robby Workman.</span><br style="font-family:Times;font-size:small;background-color:rgb(254,254,254)"><span style="font-family:Times;font-size:small;background-color:rgb(254,254,254)">n/rsync-3.1.2-i586-1.txz: Upgraded.</span><br style="font-family:Times;font-size:small;background-color:rgb(254,254,254)"><span style="font-family:Times;font-size:small;background-color:rgb(254,254,254)">x/libXi-1.7.6-i586-1.txz: Upgraded.</span><br style="font-family:Times;font-size:small;background-color:rgb(254,254,254)"><span style="font-family:Times;font-size:small;background-color:rgb(254,254,254)">x/pixman-0.33.6-i586-1.txz: Upgraded.</span><br style="font-family:Times;font-size:small;background-color:rgb(254,254,254)"><span style="font-family:Times;font-size:small;background-color:rgb(254,254,254)">x/xorg-cf-files-1.0.6-noarch-1<wbr>.txz: Upgraded.</span><br style="font-family:Times;font-size:small;background-color:rgb(254,254,254)"><span style="font-family:Times;font-size:small;background-color:rgb(254,254,254)">xap/mozilla-firefox-43.0.2-i58<wbr>6-2.txz: Rebuilt.</span><br style="font-family:Times;font-size:small;background-color:rgb(254,254,254)"><span style="font-family:Times;font-size:small;background-color:rgb(254,254,254)">       Compile with -Os instead of -O2 to work around crash issues.</span><br style="font-family:Times;font-size:small;background-color:rgb(254,254,254)"><span style="font-family:Times;font-size:small;background-color:rgb(254,254,254)">       Recent betas are working fine with -O2, so we'll probably be</span><br style="font-family:Times;font-size:small;background-color:rgb(254,254,254)"><div><span style="background-color:rgb(254,254,254);font-family:Times;font-size:small">       able to switch back to that again soon. Thanks to j_v.</span> </div><span><font color="#888888"><br><br>-- <br>-Ryan<br>[<a href="http://ryanpcmcquen.org" target="_blank">ryanpcmcquen.org</a>]<br><br>
</font></span><br></div></div><span class="">______________________________<wbr>_________________<br>
SlackBuilds-users mailing list<br>
<a href="mailto:SlackBuilds-users@slackbuilds.org" target="_blank">SlackBuilds-users@slackbuilds.<wbr>org</a><br>
<a href="http://lists.slackbuilds.org/mailman/listinfo/slackbuilds-users" rel="noreferrer" target="_blank">http://lists.slackbuilds.org/m<wbr>ailman/listinfo/slackbuilds-us<wbr>ers</a><br>
Archives - <a href="https://lists.slackbuilds.org/pipermail/slackbuilds-users/" rel="noreferrer" target="_blank">https://lists.slackbuilds.org/<wbr>pipermail/slackbuilds-users/</a><br>
FAQ - <a href="https://slackbuilds.org/faq/" rel="noreferrer" target="_blank">https://slackbuilds.org/faq/</a><br>
<br>
<br></span></blockquote></div><br></div>
</blockquote></div><br></div>