Re: Sourceware mitigating and preventing the next xz-backdoor
Jeff Law <[email protected]>
| Newsgroups | gmane.comp.lib.glibc.alpha,gmane.comp.gcc.devel,gmane.comp.gnu.binutils,gmane.comp.gdb.devel |
|---|---|
| Message-ID | <[email protected]> |
On 4/3/24 8:04 AM, Tom Tromey wrote: >>>>>> "Florian" == Florian Weimer <[email protected]> writes: > > Florian> Everyone still pushes their own patches, and there are no > Florian> technical countermeasures in place to ensure that the pushed version is > Florian> the reviewed version. > > This is a problem for gdb as well. > > Probably we should switch to some kind of pull-request model, where > patches can only be landed via the UI, after sufficient review; and > where all generated files are regenerated by the robot before checkin. > (Or alternatively some CI runs and rejects patches where they don't > match.) I've very much prefer to move to a pull-request model. jeff