Bug 112652 - gnumeric - use system pcre
Summary: gnumeric - use system pcre
Status: RESOLVED FIXED
Alias: None
Product: SUSE LINUX 10.0
Classification: openSUSE
Component: GNOME (show other bugs)
Version: Beta 3
Hardware: Other All
: P5 - None : Major
Target Milestone: ---
Assignee: E-mail List
QA Contact: E-mail List
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2005-08-24 09:40 UTC by Marcus Meissner
Modified: 2005-08-24 15:26 UTC (History)
1 user (show)

See Also:
Found By: Other
Services Priority:
Business Priority:
Blocker: ---
Marketing QA Status: ---
IT Deployment: ---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Marcus Meissner 2005-08-24 09:40:46 UTC 
gnumeric should use the system pcre.  
  
make sure it does.  
  
(in case the regular expressions can come from a document, please specify.)
Comment 1 Rodrigo Moya 2005-08-24 11:08:42 UTC 
CVS HEAD version is fixed to use the system's pcre.
Comment 2 JP Rosevear 2005-08-24 12:13:57 UTC 
Jody, can you backport this fix?
Comment 3 Jody Goldberg 2005-08-24 15:03:28 UTC 
rodrigo : cvs still uses a private copy of pcre.  It's been moved into libgoffice.
jpr : There is no fix to backport.  Even if there was we should ship
gnumeric-1.6 which will come out with gnome-2.12.

marcus : gnumeric's pcre has a few upstream fixes for utf-8 support.  The local
copy is small and is not exposed.  Why do we need to use the system copy ?
Comment 4 Marcus Meissner 2005-08-24 15:05:58 UTC 
the upstream pcre had a security ( integer overflow) problem.   
   
check  https://bugzilla.novell.com/show_bug.cgi?id=106209  
  
In general the system library should be used to avoid requiring updates  
for old versions if the library is affected by such seczurity issues.  
  
For gnumeric this is not necessary, since it will not take untrusted input  
usually.
Comment 5 Jody Goldberg 2005-08-24 15:20:33 UTC 
marcus : gnumeric syncs to the upstream copy and adds some utf-8 optimization. 
It would be nice to use the system version, but it would be a low priority.  For
now the only use of pcre is internal to gnumeric using regexps generated from
value formats.  While the formats may be user entered, they are only indirectly
passed to pcre.  It could be done, but I would rather not add a build dependency
this close to a release.  I've contacted the subsystem maintainer and he'll have
a look after the release.
Comment 6 Marcus Meissner 2005-08-24 15:26:57 UTC 
no worries. 
 
getting it fixed from upstream is ok for gnumeric.