[arch-dev-public] boost 1.42 serialization issue

[Jan de Groot]

On Thu, 2010-03-18 at 12:19 +0100, Giovanni Scafora wrote:
> Il 18/03/2010 11:18, Ionut Biru ha scritto:
> > Hi,
> > http://bugs.archlinux.org/task/18470#comment59302
> >
> > there is a serious issue with boost 1.42 and upstream doesn't have a fix
> > yet. An user suggested that is better to downgrade boost to 1.41.
> >
> > What do you think about this? Wait upstream to fix this and backport it
> > or downgrade? If downgrade, who want to help on rebuilding?
> >
> 
> -1
> I am against the downgrade of boost.
> We have to find a solution for encfs, and we cannot downgrade and 
> rebuild all of the packages just for encfs.

This is not "just for encfs", but for serious datacorruption. Encfs is
an example of something that breaks, but if serialization and
deserialization doesn't return the same data as the input data, then
things can go seriously wrong.