Re: Warning when compiling GNUstep

[Richard Frith-Macdonald]

On Monday, July 28, 2003, at 07:43 PM, Chris B. Vetter wrote:

> On Mon, 28 Jul 2003 18:10:17 +0100
> Richard Frith-Macdonald <richard@brainstorm.co.uk> wrote:
> [...]
> > 3. link bugs I didn't find in the gnustep code (and don't occur on my
> > debian system) ... perhaps you could find out which librariees the
> > functions are  referenced in, and notify the maintainers of those
> > libraries?
> [...]
>
> If the -lcrypt warnings occur in -gui and/or -back, it's an 'inherited'
> warning from -base. base/SSL to be specific.
>   Those warnings can be fixed by specifically linking -lcrypt.

I don't understand that ... the crypto stuff in base/SSL is building
a bundle.  This is not linked into the rest of the code, so adding
-lcrypt to other code should have nothing to do with it, any
required libraries should have been linked into the bundle when
it was built (or the build should have failed).
Also ... the bundle is typically not even loaded unless your
code tries to access an https URL, so even if the linking of
libraries into bundles is going wrong somehow, it seems unlikely
that anything to do with this bundle is causing errors in the gui.

> tmpnam() is used in gsnd

I found that call deep inside gsnd ... but the warning was from linking
gpbs ... so I guess it's from some other external library.  Of course 
that
doesn't mean that gsdn should not be fixed, I think it should.

> and mktemp() is used in NSData.
>   Those should not be used as they pose a security risk (see warning)
NSData does not use mktemp() unless mkstemp() is not provided
and the warning suggests that mkstemp() is available on the system.
Perhaps configure is failing to find it, or NSData is not using it and
the warning is from elsewhere.


So, while I have no way of checking what the differences of a BSD system
are, my inclination is to disbelieve the suggested causes of these
problems ... I'd like to see more detail to back up an alternative
diagnosis (or justify the diagnosis somehow) and
provide a patch we can apply to get bsd stuff working better