Newsgroups: php.internals Path: news.php.net Xref: news.php.net php.internals:101806 Return-Path: Mailing-List: contact internals-help@lists.php.net; run by ezmlm Delivered-To: mailing list internals@lists.php.net Received: (qmail 31207 invoked from network); 7 Feb 2018 20:04:45 -0000 Received: from unknown (HELO lists.php.net) (127.0.0.1) by localhost with SMTP; 7 Feb 2018 20:04:45 -0000 Authentication-Results: pb1.pair.com header.from=smalyshev@gmail.com; sender-id=pass Authentication-Results: pb1.pair.com smtp.mail=smalyshev@gmail.com; spf=pass; sender-id=pass Received-SPF: pass (pb1.pair.com: domain gmail.com designates 209.85.160.41 as permitted sender) X-PHP-List-Original-Sender: smalyshev@gmail.com X-Host-Fingerprint: 209.85.160.41 mail-pl0-f41.google.com Received: from [209.85.160.41] ([209.85.160.41:40050] helo=mail-pl0-f41.google.com) by pb1.pair.com (ecelerity 2.1.1.9-wez r(12769M)) with ESMTP id D7/FF-49805-CDB5B7A5 for ; Wed, 07 Feb 2018 15:04:45 -0500 Received: by mail-pl0-f41.google.com with SMTP id g18-v6so707035plo.7 for ; Wed, 07 Feb 2018 12:04:44 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=subject:to:references:from:message-id:date:user-agent:mime-version :in-reply-to:content-language:content-transfer-encoding; bh=7SDSONmm23imboNzCNJTRY5O+W9du2EbVIkPwazxD/k=; b=el4GZ35/kDZ6JXdejN/xtI06ZI2yaMG1FvMS12lTck7S5PqEhvEoYcaZsDB6muZ9co oad8g9mhmQ8IbrL7UOfSX/2o4HIKEM0khFOhb8iR9NzuI9ifh6dkuzQcc6Msnmyd6iM1 mMoMTR2MKkCKSwwZkXcHmTxrLZFWa8sCvqeOU5j/9K29b0TlzUI8hxei11/jT2A37fFz VWJOqTzVt1KL/32wdsoyHRVbXmCkgRa5AVX627+qpgEi8vID1mSE0a2aoeTO4/F5vq3N eSWxc9xE2ZAp0JnnKlGvHE1f5siCazawxZV08IOHLhNNrIwIq1Ji/Q6Hnp9xDwIYph4P qRdg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:subject:to:references:from:message-id:date :user-agent:mime-version:in-reply-to:content-language :content-transfer-encoding; bh=7SDSONmm23imboNzCNJTRY5O+W9du2EbVIkPwazxD/k=; b=TKeQDIwMXyO3J87b5QPf7IIXohvuj86rAJ/YoEKU/qVrTTk4s/C88ZfYEzA/oBj6zT sOq6fp6KPFXxs2TENxVBH7bXQFR+xKO7U1LlJYBdA+qRU3ysmYgA6ZV4/RYTKkGvtcjZ SD8icRMbCqCEMtbT62mf+THoeizf5cwy7+LZmVXW5Z3c1MqIIbFGLXppkj0vsEoaiEu3 D+33f6Lf8DX18aXbX2yneKB1FEGpM0nBT+knzxpgER9G2snmyceTo6zbpVAu1m0UZqfo kPDz+J3w7QfZVzFzacQyHt74RtSdhVXfr6+KIxMiqlgdyTfOZbAAfLMBsYC9J0yZaVRX I0fg== X-Gm-Message-State: APf1xPCGooV/J50Z+INTQGZWKmXqGqhVVZhjp1LBGmLkz3JxN88Ch6P2 X4ukTaD5uzMZAELiVSx8vcYnzzsKaA== X-Google-Smtp-Source: AH8x2254dv9desJkZI4d4ny1t/A0RKEhX+tZA5mJEfw+2XVfGvz5n1onZVEAGx9YyyJ+u9rAAc8rAg== X-Received: by 2002:a17:902:62:: with SMTP id 89-v6mr6962973pla.284.1518033881127; Wed, 07 Feb 2018 12:04:41 -0800 (PST) Received: from Stas-Pro-2016.lan (c-73-71-144-171.hsd1.ca.comcast.net. [73.71.144.171]) by smtp.gmail.com with ESMTPSA id i3sm4438999pgs.63.2018.02.07.12.04.40 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Wed, 07 Feb 2018 12:04:40 -0800 (PST) To: "Christoph M. Becker" , PHP Internals References: <12636a53-48a8-9be4-c2cc-a7e4a16a8ba8@gmx.de> Message-ID: Date: Wed, 7 Feb 2018 12:04:39 -0800 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.12; rv:58.0) Gecko/20100101 Thunderbird/58.0 MIME-Version: 1.0 In-Reply-To: <12636a53-48a8-9be4-c2cc-a7e4a16a8ba8@gmx.de> Content-Type: text/plain; charset=utf-8 Content-Language: en-US Content-Transfer-Encoding: 7bit Subject: Re: [PHP-DEV] Replaced the bundled libgd with upstream (aka. system) libgd From: smalyshev@gmail.com (Stanislav Malyshev) Hi! > During the discussion of PR 3080[1] the idea to replace our bundled > libgd with an (unmodified) upstream libgd[2] has come up again. It > seems this issue deserves its own discussion, and probably an RFC. I think this is a good idea. In general, as open source ecosystem matures (and more and more people move to use established OSS vendors or non-OSS vendors well-integrated into OSS system, like macOS/homebrew setups) most people move to use distributions which supply wide array of libraries usually covering ones that we used to bundle, and often doing better job in keeping with updates and security fixes than we can. So in general I think phasing out bundling, unless absolutely necessary, is the idea whose time has come. > bundled libgd)[5]. Another important difference is that our bundled > libgd uses ZendMM, but upstream libgd does not[6]. This one we need to find a solution for. GD is often exposed to the unfiltered user input, has a potential to consume large amounts of memory and not having ZendMM memory limits in place can be a serious issue. > For most Linux environments PHP is built with an upstream (system) > libgd; on Windows usually the bundled libgd is used. Users targeting Windows is another concern - are there viable solutions for non-bundled GD for Windows that we can recommend to the users? If not, that means we still have to keep and maintain bundled GD, and if so, there's no point to spend any time on un-bundling before we find solution to this. -- Stas Malyshev smalyshev@gmail.com