<html><head></head><body>true, the more backports you make, the harder a merge will be once you realize that you cannot go on and must merge. which will happen.<br><br><div class="gmail_quote">Am 5. Februar 2018 20:44:56 MEZ schrieb Magnus Melin <mkmelin+mozilla@iki.fi>:<blockquote class="gmail_quote" style="margin: 0pt 0pt 0pt 0.8ex; border-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;">
<pre class="k9mail">On 05-02-2018 19:09, Gervase Markham wrote:<br /><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #729fcf; padding-left: 1ex;"> On 05/02/18 11:30, Ben Bucksch wrote:<br /><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #ad7fa8; padding-left: 1ex;"> no, i mean there are low-level platform security bugs that will be<br /> exposed by thunderbird processing network data. not rendering, but<br /> lower. there are more of those than i thought.<br /></blockquote> When you get a chance, please provide a concrete example, and show how<br /> if we forked and froze Gecko, this would be a bug one could trigger both<br /> in Firefox and Thunderbird, and Firefox's patch would be unusable to us<br /> due to code change.<br /></blockquote><br />Things like <a href="https://bugzilla.mozilla.org/show_bug.cgi?id=1368652">https://bugzilla.mozilla.org/show_bug.cgi?id=1368652</a><br /><br />"Due to code change" is of course hard to prove in advance, but add many <br />one-off fixes, and sooner or later nobody really knows what's going on.<br /><br /> -Magnus<br /><br /><br /><hr /><br />tb-planning mailing list<br />tb-planning@mozilla.org<br /><a href="https://mail.mozilla.org/listinfo/tb-planning">https://mail.mozilla.org/listinfo/tb-planning</a><br /></pre></blockquote></div><br>
-- <br>
Sent from my phone. Please excuse the brevity.</body></html>