Re: security alerts in busybox
Aaro Koskinen via busybox <[email protected]> Fri, 24 Apr 2026 23:29:04 +0300
| Newsgroups | gmane.linux.busybox |
|---|---|
| Message-ID | <[email protected]> |
Hi, On Fri, Apr 24, 2026 at 08:00:55PM +0200, Roberto A. Foglietta wrote: > > On Fri, Apr 24, 2026 at 07:30:22PM +0200, Roberto A. Foglietta wrote: > > > (1) These are trivial alerts, therefore I faced it first to provide an > > > example. [...] And the second main question is straightforward: (2) > > > does this fix worth 177 bytes? In relative terms it is 150 ppm > > > compared with the full size footprint. In terms of certifications is a > > > solid step towards peace of mind. > > > > IMHO, it does not make sense to churn the code just to silence some > > random unnamed tool without any real proper reason, and it certainly > > does not give any piece of mind. > > I read: "random unnamed tool" -- I see what is the information you are > seeking for... LOL I'm not seeking any information, I just think Busybox should ignore your tool and your patch altogether. A.