[Rpm-maint] [rpm-software-management/rpm] Harden against crafted inputs (#1471)
Demi Marie Obenour
notifications at github.com
Wed Jan 13 17:15:16 UTC 2021
> Please split off the commits with actual reproducer to a separate PR, and make the reproducers available someplace. That allows us to prioritize, properly reviewing this kind of stuff is a lot of work.
Will do. I only have reproducers for a small subset of these, though.
> Second, split this further into smaller PRs, this kind of pile-up is impossible to meaningfully review in GH. Stick to just a handful of actually related commits per PR, "hardening" is far too broad a topic. One could rewrite the whole codebase under that excuse
Understandable.
--
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/rpm-software-management/rpm/pull/1471#issuecomment-759593512
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.rpm.org/pipermail/rpm-maint/attachments/20210113/bc123083/attachment.html>
More information about the Rpm-maint
mailing list