Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Upgrade xz to 5.4.1 #108

Closed
wants to merge 5 commits into from
Closed

Conversation

NobodyXu
Copy link

Signed-off-by: Jiahao XU Jiahao_XU@outlook.com

Signed-off-by: Jiahao XU <Jiahao_XU@outlook.com>
Signed-off-by: Jiahao XU <Jiahao_XU@outlook.com>
Signed-off-by: Jiahao XU <Jiahao_XU@outlook.com>
Signed-off-by: Jiahao XU <Jiahao_XU@outlook.com>
 - Update path to `xz` source code
 - Ignores test files:
    - good-1-arm64-lzma2-1.xz
    - good-1-arm64-lzma2-2.xz
    - good-1-empty-bcj-lzma2.xz
   Since the first two uses ARM64 filter and the last one has an empty
   Block that uses PowerPC BCJ and LZMA2 that seems to break on my M1.

Signed-off-by: Jiahao XU <Jiahao_XU@outlook.com>
Comment on lines +33 to +40
// Ignores `good-1-arm64-lzma2-1.xz` and `good-1-arm64-lzma2-2.xz`
// since they uses the ARM64 filter.
//
// Ignores `good-1-empty-bcj-lzma2.xz` since it has an empty Block
// that uses PowerPC BCJ and LZMA2.
if filename.contains("arm64") || filename == "good-1-empty-bcj-lzma2.xz" {
continue;
}
Copy link
Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I have no idea why these tests failed on my M1.

Disabling them fixed the CI, but not sure this is the right thing to do.

Copy link
Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Aha I see this is because arm encoder is not enabled, which will be fixed by #111

@dragonmaus
Copy link

From what I can tell, the malicious actor started contributing to XZ back in 2020.

5.2.5 looks like the last stable version before that point, so it might be worth holding off on any updates until some clarity is brought to the whole situation.

@NobodyXu NobodyXu closed this Mar 30, 2024
@NobodyXu NobodyXu deleted the upgrade-xz branch March 30, 2024 23:22
@NobodyXu
Copy link
Author

Agreed, closing the PR for now.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants