[Webkit-unassigned] [Bug 205337] New: [GTK] USE_SYSTEM_MALLOC is a footgun

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Tue Dec 17 06:38:37 PST 2019


https://bugs.webkit.org/show_bug.cgi?id=205337

            Bug ID: 205337
           Summary: [GTK] USE_SYSTEM_MALLOC is a footgun
           Product: WebKit
           Version: WebKit Nightly Build
          Hardware: PC
                OS: Linux
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: WebKitGTK
          Assignee: webkit-unassigned at lists.webkit.org
          Reporter: mcatanzaro at gnome.org
                CC: bugs-noreply at webkitgtk.org

Both openSUSE and SUSE Linux Enterprise build WebKit with USE_SYSTEM_MALLOC=ON. I suggested avoiding this in https://blogs.gnome.org/mcatanzaro/2018/11/02/on-webkit-build-options-also-how-to-accidentally-disable-important-security-features/ since it disables various important security features, but clearly that didn't work because it's still happening a year later.

USE_SYSTEM_MALLOC used to be required to build on less-common architectures, but nowadays the CMake build system knows how to enable USE_SYSTEM_MALLOC when the architecture is something not explicitly supported, so users building WebKit no longer need to use it. I think it's time to make this private and stop supporting its use on architectures where bmalloc works.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20191217/86f64782/attachment.htm>


More information about the webkit-unassigned mailing list