3 ms·
The exception? It's standard practice for distros to compile with hardening flags, and if RH submits the bugs they find with Coverity upstream, that protects th
by rossy 5y ago
The exception? It's standard practice for distros to compile with hardening flags, and if RH submits the bugs they find with Coverity upstream, that protects the 1000s of C projects they package.
- pjmlp 5y agoStandard practice they say, https://googleprojectzero.blogspot.com/2021/12/this-shouldnt-have-happened.html https://googleprojectzero.blogspot.com/2021/12/this-shouldnt...
- torstenvl 5y agoMozilla is not a Linux distro. You have made dozens of negative (and sometimes rude) comments in this thread. I'm curious why you're spending so much time and energy being negative. If C isn't something you're interested in, why not just ignore it and move on?
- tialaramex 5y ago> Mozilla is not a Linux distro. That's true. But should I interpret this to mean, "All that stuff about how careful we are doesn't actually apply to any third party software, we only do that for code we wrote" ? Because the thing about a Linux distro is that it's overwhelmingly third party software. If that stuff does apply to NSS, then all that hard work apparently missed this pretty serious bug that could not have happened in a safe language.
- pjmlp 5y agoC powers lots of junk where I as a user don't have a choice other than put up with security mitigations. Being rude, yeah that is how people defend themselves when reality doesn't check.