Re: security alerts in busybox
"Roberto A. Foglietta via busybox" <[email protected]> Mon, 27 Apr 2026 21:10:19 +0200
| Newsgroups | gmane.linux.busybox |
|---|---|
| Message-ID | <CAJGKYO4cZBkZSPvW3f=14LOuFPkOVnWT70m2p0K681sowV7hbw@mail.gmail.com> |
On Mon, 27 Apr 2026 at 20:54, Aaro Koskinen <[email protected]> wrote: > > Hi, > > On Mon, Apr 27, 2026 at 08:39:56PM +0200, Roberto A. Foglietta via busybox wrote: > > > But your commit message says only fixed issue number *something* > > > > So what? > > Such commit logs are useless for others, especially after ten years > when trying to check later why some change was done. Those messages are > typical corporate way "let's call it a day/week" commits. > > > It is not just about security, I wrote in first place that from a > > security PoV I consider these 44 alerts about ctime, gmtime, > > localtime, can be easily considered false positives. > > > > I have also explained that it is a move towards supporting alternative > > approaches to fork(), like NOMMU vfork() even threads in such > > infrastructure in which efficiency is a matter of scaling. > > > > Keep in consideration that this long and convoluted e-mail create > > distress in technical m-list. > > You could have avoided it by providing clean reviewable commits with > good messages, technical rationale and background information. Also > accepting feedback. > Suggestion by text diagnosys: stop projecting your fantasies to others, not because it isn't polite, but because it is a mental illness/flawless (it is called pathological delusional syndrome or something that translated in similar words) projecting our expectations onto others after 6-8 years old in this maniacal way of doing. I decide how to work on my git repository, not you. Period.