Re: security alerts in busybox

Aaro Koskinen via busybox <[email protected]> Fri, 24 Apr 2026 20:44:55 +0300
Newsgroups gmane.linux.busybox
Message-ID <[email protected]>
Hi,

On Fri, Apr 24, 2026 at 07:30:22PM +0200, Roberto A. Foglietta wrote:
> (1) These are trivial alerts, therefore I faced it first to provide an
> example. [...] And the second main question is straightforward: (2)
> does this fix worth 177 bytes? In relative terms it is 150 ppm
> compared with the full size footprint. In terms of certifications is a
> solid step towards peace of mind.

IMHO, it does not make sense to churn the code just to silence some
random unnamed tool without any real proper reason, and it certainly
does not give any piece of mind.

A.