From owner-svn-ports-head@freebsd.org Tue Sep 27 21:58:07 2016 Return-Path: Delivered-To: svn-ports-head@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 016A3BEAD05; Tue, 27 Sep 2016 21:58:07 +0000 (UTC) (envelope-from mat@FreeBSD.org) Received: from prod2.absolight.net (prod2.absolight.net [79.143.243.136]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "plouf.absolight.net", Issuer "CAcert Class 3 Root" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id B61071A8C; Tue, 27 Sep 2016 21:58:06 +0000 (UTC) (envelope-from mat@FreeBSD.org) Received: from prod2.absolight.net (localhost [127.0.0.1]) by prod2.absolight.net (Postfix) with ESMTP id 7E9C5BDCAB; Tue, 27 Sep 2016 23:58:04 +0200 (CEST) Received: from atuin.in.mat.cc (48.196.7.109.rev.sfr.net [109.7.196.48]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client did not present a certificate) by prod2.absolight.net (Postfix) with ESMTPSA id 2BF83BDC77; Tue, 27 Sep 2016 23:58:04 +0200 (CEST) Subject: Re: svn commit: r422826 - head/security/libsodium To: marino@freebsd.org, Vsevolod Stakhov , ports-committers@freebsd.org, svn-ports-all@freebsd.org, svn-ports-head@freebsd.org References: <201609271943.u8RJhXe0061946@repo.freebsd.org> <6d763b2f-0745-9f7a-c94e-b9653174bdd5@marino.st> From: Mathieu Arnold Organization: Absolight / The FreeBSD Foundation Message-ID: <2acdea56-9c02-4ea9-943c-7a5091ca49ab@FreeBSD.org> Date: Tue, 27 Sep 2016 23:58:02 +0200 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.11; rv:45.0) Gecko/20100101 Thunderbird/45.3.0 MIME-Version: 1.0 In-Reply-To: Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="6AudibkidL1KMgxhuccOo5D6sDc0uAmme" X-BeenThere: svn-ports-head@freebsd.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: SVN commit messages for the ports tree for head List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 27 Sep 2016 21:58:07 -0000 This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --6AudibkidL1KMgxhuccOo5D6sDc0uAmme Content-Type: multipart/mixed; boundary="q0rh8To6j36bdSpA2QlPK0kBhvTbQBEfj"; protected-headers="v1" From: Mathieu Arnold To: marino@freebsd.org, Vsevolod Stakhov , ports-committers@freebsd.org, svn-ports-all@freebsd.org, svn-ports-head@freebsd.org Message-ID: <2acdea56-9c02-4ea9-943c-7a5091ca49ab@FreeBSD.org> Subject: Re: svn commit: r422826 - head/security/libsodium References: <201609271943.u8RJhXe0061946@repo.freebsd.org> <6d763b2f-0745-9f7a-c94e-b9653174bdd5@marino.st> In-Reply-To: --q0rh8To6j36bdSpA2QlPK0kBhvTbQBEfj Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Le 27/09/2016 =C3=A0 23:50, John Marino a =C3=A9crit : > On 9/27/2016 16:14, Mathieu Arnold wrote: >> Le 27/09/2016 =C3=A0 21:51, John Marino a =C3=A9crit : >>> On 9/27/2016 14:43, Vsevolod Stakhov wrote: >>>> Author: vsevolod >>>> Date: Tue Sep 27 19:43:32 2016 >>>> New Revision: 422826 >>>> URL: https://svnweb.freebsd.org/changeset/ports/422826 >>>> >>>> Log: >>>> - Update to 1.0.11 >>>> >>>> No bump for dependent port is required as this version has no API >>>> changes >>>> >>>> >>>> Modified: head/security/libsodium/pkg-plist >>>> =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D >>>> >>>> >>>> --- head/security/libsodium/pkg-plist Tue Sep 27 18:25:34 2016 >>>> (r422825) >>>> +++ head/security/libsodium/pkg-plist Tue Sep 27 19:43:32 2016 >>>> (r422826) >>>> @@ -58,7 +58,7 @@ include/sodium/version.h >>>> lib/libsodium.a >>>> lib/libsodium.so >>>> lib/libsodium.so.18 >>>> -lib/libsodium.so.18.1.0 >>>> +lib/libsodium.so.18.1.1 >>>> libdata/pkgconfig/libsodium.pc >>>> %%PORTDOCS%%%%DOCSDIR%%/AUTHORS >>>> %%PORTDOCS%%%%DOCSDIR%%/README.markdown >>>> >>> >>> First, I don't think the "no API change" means a bump is not mandator= y. >>> Secondly, the SO name of the library changed!!! You have to bump it,= >>> there's no question here. >>> >>> It's 1000x better to bump unnecessarily than to skip a bump that is >>> required. >> >> No it did not. >> >> $ readelf -d `make -V STAGEDIR`/usr/local/lib/libsodium.so|grep soname= >> 0x000000000000000e SONAME Library soname: >> [libsodium.so.18] >> >> The file name changed, but software will try to find libsodium.so.18, >> and that will still work. >> > > regardless, why should the bump be avoided? > There could have been fixes against the existing functions. > > I'm starting to see a lot of people go out of their way to bump and I > don't know where the trend is coming from. > > Is portmgr saying vsevolod is correct not to bump this? I would bump > it and if that's wrong maybe my bump criteria is wrong. You have to bump ports that depend on a .so when the soname changes. For= example, if the libsodium update had done this: lib/libsodium.so -lib/libsodium.so.18 -lib/libsodium.so.18.1.0 +lib/libsodium.so.19 +lib/libsodium.so.19.2.1 You would have needed to bump, because the soname would have changed from= libsodium.so.18 to libsodium.so.19, and software built with the old vers= ion would have tried to load the .18 lib that did not exist any more. As a general rule, when you don't know what to do, don't do what you gues= sed, ask. There are people with more knowledge than you, and they can ex= plain you what you are doing wrong. =20 --=20 Mathieu Arnold --q0rh8To6j36bdSpA2QlPK0kBhvTbQBEfj-- --6AudibkidL1KMgxhuccOo5D6sDc0uAmme Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iQJ8BAEBCgBmBQJX6utrXxSAAAAAAC4AKGlzc3Vlci1mcHJAbm90YXRpb25zLm9w ZW5wZ3AuZmlmdGhob3JzZW1hbi5uZXQzQUI2OTc4OUQyRUQxMjEwNjQ0MEJBNUIz QTQ1MTZGMzUxODNDRTQ4AAoJEDpFFvNRg85I3fcP/1bnhFgdYLYUxlAsEk+bkXsT KERYBlc3JjVQbIMvuh29fTF32MmGETMqd2NpTghWkjMgoJ4+0TN9Kt8GpawTjZd8 ZPY50FfC6ucKx2ks7kUN/1O2z/CjyES9pns+YAk3+JmkBXTbAn1uiEAUGspou6lu CCXFc+qVUDAnIStoPBGerMkfmB7NkiWijJuyqpjIlMTr8Xp1pGyRMcSPbika2pPb SFj4urNdjt+qHEe6ImSCwVxpr4pBkRi1LyJUoD099CO2OYrsNPTIPKclu7qgvFvI VQ58kqFHX5lff61/FLhAKDxwu02r+LFwZc4JbOJxLMq/rB9GZ3EY4w7hjeYgEKAk TyAaS1OU8Mo7Vz6CNqk9djRqThODFjvkpmbRuOL7U7NxirbNveZiQ9NnnhixaPOR 4HsJNyx67Fy38Fc/CNS3oSGbuxEY/c4NBD/0F1rjvU6SFaPbaZDNC4RB8e6NJmGf mZR6xQtajEFd9oxnGFX6xPAOZ2DWSdmz2OoB17qdRWvaZuvu42yyuAKBp08vEKxf kF3s33AlivAyCitwSZNXEf4Pqx0deszY369Vl6/qABEUFryqhI3ya8+86SopRWpi p16BW7CvjtYs3H85aVIZUUTqAz1Hs8TnD49DXsYb0MTsv5gXMAIqVSoMeH7CcJ5X r7mJxLTGsBaJUU63XMXj =A28B -----END PGP SIGNATURE----- --6AudibkidL1KMgxhuccOo5D6sDc0uAmme--