use "path" scheme only updates library search path not packages

[SeanTAllen]

So, it is unclear if this is a bug. However, I discussed with Sylvan and he thinks it is a bug.

The documentation for the --path option to ponyc on the command line says it updates the paths for packages and libraries. Whether that is working or not is open to investigation, I have tested that it correctly works for package paths. The documentation string dates back to at least 2013 so I think it is reasonable to assume it captures intent.

use "path" by all indications is meant to be a mirror that works from within pony source code. It however, only updates library not package paths and should be updated to match the end results of --path in relation to changing the package search path.

It is possible that --path is broken in that it doesn't work for libraries. I haven't verified that it works for both packages and libraries as it is supposed to. However, I do know that use "path" should be updating package paths assuming:

• Sylvan is correct in thinking that it should
• My assumption that it should mirror --path in functionality is correct

[jemc]

For clarity here, note that "library search paths" here means for C/FFI library linking

[redvers]

Does that mean we can override specified use path / --path for library linking when cross compiling?

[jemc]

I have concerns about allowing Pony source code to manipulate Pony code search paths. I don't think it's a good idea from a security perspective.

However I agree this is a "least surprise" bug in that we'd expect the two features to behave the same way. So I'm fine with addressing the discrepancy here, but Sean has mentioned that he has plans to close the security holes implied here in other ways, along with other security holes. And as long as we're on track to resolve these, then I wouldn't "vote against" a fix for this ticket.

[SeanTAllen]

Does that mean we can override specified use path / --path for library linking when cross compiling?

There's no override. It is additive only.