clamav icon indicating copy to clipboard operation
clamav copied to clipboard

1.4-rc needless bumps major so

Open sebastianas opened this issue 7 months ago • 0 comments

I've been looking at commit e6b2e5d1a78e3f592280791a740c786e0d037af7 and from what I can tell this does not qualify for a major so bump. It is said a macros like CL_SCAN_PARSE_IMAGE has been added. This does not matter. "Older" code can use the library without any trouble. It will just not use this. The code does not require the macro to be set. It is optional as far as I can tell. Having this bump requires to recompile all users of the library and I don't see how the result is different except it links now against libclamav13 instead of libclamav12.

Looking at libclamav.map since 1.3.0 release, I see functions removed but only in the CLAMAV_PRIVATE section.

Is there something I have overseen?

Since I have libclamav.map open, why do we still have CLAMAV_1.0.0…CLAMAV_0.104.0 around? There was a so bump after this was introduced (so 11 -> 12) so this could have been cleaned up. I asked not to introduce them in the first place because they did not solve a problem nor served they another purprose.

A valid use case this would be to add cl_retflevel into each released version. The problem is:

  • compile clamav 1.3.0
  • compile everything against libclamav that depends on it
  • update clamav to 1.3.1, this updates CL_FLEVEL
  • compile packageX against clamav.

The way this is done now is that there is no difference between libclamav 1.3.0 and 1.3.1 so packageX could be updated before libclamav is updated. However packageX will complain on startup. Therefore I have to manually update the dependency for cl_retflevel on each version update. Solving this with the version string would require to add cl_retflevel on each version in one of the version strings. Now, I', not asking pointing out a valid use case ;) Also, adding a new exported in a new version would require one of these to record the version dependency properly. Therefore after a major so bump (11->12), all of this gone and you can start from scratch having only a CLAMAV_PUBLIC.

Sebastian

sebastianas avatar Jun 29 '24 11:06 sebastianas