Re: GAP3 spkg

68 views
Skip to first unread message

Dima Pasechnik

unread,
Sep 8, 2015, 2:45:39 PM9/8/15
to sage-combinat-devel, sage-devel
This package is a potential virus. It distributes and installs executables.
Is this acceptable?!!

On Tuesday, 8 September 2015 06:48:11 UTC-7, Travis Scrimshaw wrote:
Hey combinat,
   Has anyone tried to install the now included optional GAP3 spkg? I get a checksum error when I do.

Best,
Travis

Dima Pasechnik

unread,
Sep 8, 2015, 3:07:15 PM9/8/15
to sage-devel, sage-comb...@googlegroups.com


On Tuesday, 8 September 2015 11:45:39 UTC-7, Dima Pasechnik wrote:
This package is a potential virus. It distributes and installs executables.
Is this acceptable?!!

by the way, checksums are meant to prevent tampering... The fact that there is now a checksum error (cf. #19164) says that perhaps, perhaps  the tarball
got tampered with, and as it contains executables to be installed, there is absolutely no telling on what's actually is going on...


Jeroen Demeyer

unread,
Sep 8, 2015, 3:11:36 PM9/8/15
to sage-...@googlegroups.com
On 2015-09-08 20:45, Dima Pasechnik wrote:
> This package is a potential virus. It distributes and installs executables.
> Is this acceptable?!!

Obviously not.

Dima Pasechnik

unread,
Sep 8, 2015, 3:17:58 PM9/8/15
to sage-devel

then we need to revert #8906


Dima Pasechnik

unread,
Sep 9, 2015, 1:40:35 AM9/9/15
to sage-devel
OK, this is done on http://trac.sagemath.org/ticket/19164

Please review.

Nicolas M. Thiery

unread,
Sep 9, 2015, 5:10:24 AM9/9/15
to sage-...@googlegroups.com
I see your points. However do you have alternative route to suggest?
Building GAP3 from source is somewhat annoying as it's 32bits only,
and thus requires setting up a 32bit build environment. So far that's
been a non trivial prerequisite. But if someone knows how to handle
this properly, I am all for it!

Of course, whatever route is taken, the source should be provided.

Cheers,
Nicolas
--
Nicolas M. Thiéry "Isil" <nth...@users.sf.net>
http://Nicolas.Thiery.name/

Dima Pasechnik

unread,
Sep 9, 2015, 12:29:57 PM9/9/15
to sage-devel, Nicolas...@u-psud.fr
I suggest that we just port stuff there to GAP4.
It is a nontrivial amount of work, but some of it is already done by
your humble servant and others, see e.g.
https://github.com/gap-system/ve (something that I plan to turn into a proper GAP4 package,
which is easy, as the porting to new GMP is done) and
https://github.com/dimpase/anusq (which even has a crude GAP4 interface now, and the original
author of anusq has promised to finish this off)

This package as it is is a swarm of bugs, as e.g. some parts of it rely on very outdated GMP, some
of it have GAP bugs fixed in GAP4, etc etc.

Cheers,
Dima
Reply all
Reply to author
Forward
0 new messages