DRLVM is using APR version 1.2.12 which was released in November 2007. There have been numerous bug/security fixes since that time. I think we should upgrade to APR version 1.3.8 which was on August 6th 2009.
I've tested the following patch on Linux/x86_64 and I am running tests on Linux/x86 and windows/x86. Assuming the Linux/x86 and windows/x86 tests are okay, then I'd like to commit this patch (from inclusion in M11). Any objections? Regards, Mark Index: working_vm/README.txt =================================================================== --- working_vm/README.txt (revision 803806) +++ working_vm/README.txt (working copy) @@ -112,7 +112,7 @@ Apache Harmony site [http://harmony.apache.org/quickhelp_contributors.html]. Also, there are external resources required for building DRLVM: -zlib, apr-1.2.12, log4cxx, cpptasks-1.b04, etc. +zlib, apr-1.3.8, log4cxx, cpptasks-1.b04, etc. This list can change as DRLVM is being developed, so the best way to resolve external dependencies is to let the build download them: $ ant fetch-depends Index: working_vm/make/depends.properties =================================================================== --- working_vm/make/depends.properties (revision 803806) +++ working_vm/make/depends.properties (working copy) @@ -25,10 +25,10 @@ # Apache Portable Runtime, version 1.1 or above # http://apr.apache.org/download.cgi -apr.src.tgz=${depends.oss}/apr/apr-1.2.12.tar.gz -apr.src.rootdir=apr-1.2.12 -apr.src.tgz.url=http://archive.apache.org/dist/apr/apr-1.2.12.tar.gz -apr.src.tgz.md5=020ea947446dca2d1210c099c7a4c837 +apr.src.tgz=${depends.oss}/apr/apr-1.3.8.tar.gz +apr.src.rootdir=apr-1.3.8 +apr.src.tgz.url=http://www.apache.org/dist/apr/apr-1.3.8.tar.gz +apr.src.tgz.md5=310fac12285d94a162c488f4b8f1aabc # ZLIB, version 1.2.1 or above # http://www.zlib.net/
