Closed mralusw closed 2 months ago
yes, so we should not be affected. So anything to do for us here?
On the compromise, no, we should be more than OK (but I thought I'd check).
I'm trying to figure out what's going on with the embedded languages. We clearly ship some libraries as ldd
shows (and unlike what the release notes state).
:python3
yields E319).E887
) but it seems like it might be fixable by using the target's runtime (?)Lua
seems to work and fixed at 5.3Perl
at 5.30I think the release notes are also wrong about installing those interpreters on the system — if they work at all, they will work with the builtin appimage version.
Findings: all interpreters are currently configured with --enable-*interp
. This means right now:
I've reconfigured my builds to include this in scripts/build_vim.sh
CFG_OPTS+=( "--disable-pythoninterp" )
CFG_OPTS+=( "--enable-python3interp=dynamic" )
CFG_OPTS+=( "--with-python3-stable-abi=3.8" )
Only Python3 seems to have stable-ABI capabilities. On any system, one can set pythonthreedll=libpython3.11.so
or whatever, and appimage-vim will use it. To simplify things, I've written a vim script to auto-search for an the appropriate "dll" (link below); it seems to work on at least Debian derivatives.
For the other interpreters , vimhelp says this about */dyn
configurations:
The version of the shared library must match the $INTERP version Vim was compiled with.
… so for those, maybe non-dynamic is the least bad option.
What do you think should be done? I could
CFG
ops abovesearch-interpreter-dlls.vim
to the main branch, andfixed by #70
I ran
Two things to note here:
libruby
,llibperl
,liblua
and (interestingly)libpython2
(but not 3) which is different from what the release notes / documentation state. I had some release note PR's coming up in any case for unrelated stuff (AppRun.extracted
), so I ended up verifying and rewriting the docs.xz
/liblzma5
/sshd
backdoor (e.g. see the Debian fallout).sshd
anywayvim-appimage
's are currently built with Ubuntu 20.04, we probably link to (and "ship") even older versions. I thinkvim
can access compression algorithms (e.g. via its embedded languages) so this might still be a relevant pointsquashfs
) isgzip
, notxz
(see below)