5 ms·

OP’s link disagrees. A critical vulnerability being called »not a bug RTFM« is the same cultural and engineering level of »string length as hash function what’s

by quchen 4y ago

OP’s link disagrees. A critical vulnerability being called »not a bug RTFM« is the same cultural and engineering level of »string length as hash function what’s the problem«.

bawolff 4y ago
This bug is obviously not critical.
aeyes 4y ago
The response is wrong though. The RFC for this function which someone quoted further down in the bug report clearly stated that it should return false even if you feed it a garbage hash.
stef25 4y ago
The initial response to the report is obviously quite shocking, not disagreeing there.
deleted 4y ago
[deleted]