3 ms·
Libgcrypt maintainer rejects suggestion to use CI and ASan over etiquette
- arthur2e5 6y agoLinking the Twitter thread for background, since it matters to mention: 1) this is after libgcrypt 1.9.0's "textbook" heap overflow 2) libgcrypt 1.9.1, a security update, breaks --disable-asm builds on x86-64 because they also tried to do feature. Bug in question is https://dev.gnupg.org/T5279 https://dev.gnupg.org/T5279. Won't do any good to post anything there though.
- clarifier123 6y agoIt's a well known fact that GnuPG maintainers are incompetent. My favorite example: https://dev.gnupg.org/T4592?utm_source=cryptography-dispatches&utm_medium=email#127369 https://dev.gnupg.org/T4592?utm_source=cryptography-dispatch... tl;dr one of the main GnuPG developers doesn't understand how SQLite works and because of that he's going to reimplement it.