lz4-java for Debian
====================

liblz4-jni statically links liblz4
-----------------------------------

liblz4-java.so (shipped in the liblz4-jni binary package) is linked
against Debian's liblz4.a (from liblz4-dev), instead of liblz4.so, as
with previous versions.

This is to support calls JNI calls to these lz4 functions:

  LZ4_compress_fast_extState_fastReset()
  LZ4_compress_HC_extStateHC_fastReset()

which are behind the LZ4_STATIC_LINKING_ONLY (and HC equivalent)
guards in lz4.h and lz4hc.h.

These back the public LZ4JNIFastResetCompressor and LZ4JNIHCFastResetCompressor
API first added in lz4-java upstream release 1.11.0.

This seemed preferable to either vendoring lz4 sources (the approach taken by
upstream) or patching out the _fastReset calls and deviating from the upstream
API.

Security-update implications
----------------------------

When lz4 receives security updates, liblz4-jni needs to be rebuilt
(binNMU or source upload) to pick up the fix.

This is tracked by adding "Static-Built-Using: ${lz4:StaticBuiltUsing}" to
liblz4-jni.
