Bug#749451: libgtk-3-dev introduces dependency on C++ library
Simon McVittie
smcv at debian.org
Tue May 27 10:26:27 UTC 2014
On 27/05/14 01:43, Jamin Hoggard wrote:
> Details:
> libgtk-3-dev depends on libglib2.0-dev, which depends on libpcre3-dev.
> However, libpcre3-dev depends on libpcrecpp0, which introduces
> dependencies on C++ libraries (libstdc++).
These libraries must be installed during compilation due to the way
libpcre is packaged, but do not introduce extra dependencies for
applications compiled against Gtk3 (for instance, gnome-terminal uses
Gtk3 but does not depend on libpcrecpp0, even indirectly). So, the
impact is "developers' systems have slightly more libraries installed".
The build-essential metapackage depends on a C++ compiler (and hence
libstdc++) anyway, so this has basically no effect on the
build-dependencies of any Debian package (libpcrecpp0 itself is small).
Is there a concrete situation in which it is a practical problem that a
developer's system must have libpcrecpp0 and libstdc++?
If there is a real practical problem, splitting libpcre3-dev into C and
C++ parts is likely to be a better solution. However, libstdc++ is used
by build-essential and apt, so this seems likely to be mostly a
theoretical concern: in practice, Debian systems in general, and
developer systems in particular, are going to have it.
> According to the documentation at
> https://developer.gnome.org/glib/stable/glib-building.html
> GLib can, and is indeed recommended to, be compiled using GLib's
> internal version of PCRE (i.e. using the configure script option
> --with-pcre=internal).
Debian policy is to avoid embedded code copies unless there is a
compelling technical reason to use them, and ensure that the system
libpcre remains compatible with GLib's usage. This ensures that if there
is a security vulnerability in PCRE (which has happened in the past),
patching PCRE is sufficient to fix that vulnerability.
S
More information about the pkg-gnome-maintainers
mailing list