3 ms·
I tend to agree. The exploit was (by detour) committed to the source.
by solarkraft 2y ago
I tend to agree. The exploit was (by detour) committed to the source.
- ramses0 2y agoTechnically, interestingly, if `bazel` were used as the build tool, it would avoid the straightforward ability to cross-contaminate the build executable with the test code... Yeah, `bazel run test:...` would have access to the test files, but `bazel build xz:executable` would not (by default) be able to pull in extra shenanigans from the test files (and I think there's generally linting and formatting rules required by default with `BUILD.bazel` files, reducing another sneak-vectors)