cvs commit: ports/security/yara Makefile distinfo ports/security/yara/files patch-libyara__proc.c

[Matthias Andree]

Am 23.05.2011 19:04, schrieb Alexey Dokuchaev:
> On Mon, May 23, 2011 at 03:54:11PM +0000, Wesley Shields wrote:
>> wxs         2011-05-23 15:54:11 UTC
>>
>>   Modified files:
>>     security/yara        Makefile distinfo 
>>   Added files:
>>     security/yara/files  patch-libyara__proc.c 
>>   Log:
>>   - Update to 1.5.
>>   - Switch to devel/re2 instead of PCRE.
> 
> Could you perhaps explain the rationale behind pcre -> re2 (never heard
> of it before) change?  I mean, lots of ports depend on devel/pcre, which
> seems to be de-facto regex library, and having two similar (well, that's
> maybe an underestimation) libraries installed in a system without some
> sufficiently strong reason seems at least questionable.  (Unless, of
> course, this port deliberately requires re2 and cannot be built against
> pcre or easily converted.)

Alexey,

re2 is a different beast, and in particular, isn't prone to
combinatorial explosion and exponential worst-case behaviour.

Check its home page, http://code.google.com/p/re2/ -- also, PCRE is
questionable because the standard regexp matcher is regex.h/libc.
Now what? :)

Seriously, we should question the use of software that has awkward
worst-case behaviour...

HTH
Matthias