3 ms·

I’m sure AI also found real vulnerabilities on cURL. My question is why you know cURL is being “spammed” but that FFMPEG is just getting legitimate problems.

• bawolff 9mo ago
  > I’m sure AI also found real vulnerabilities on cURL. The curl maintainer published the reports and they were very clearly not security vulnerabilities in curl. > My question is why you know cURL is being “spammed” but that FFMPEG is just getting legitimate problems. To put it bluntly, because i can read. Did you actually read the reports in question?
  • groundzeros2015 9mo ago
    > because i can read So you looked their the bug list and then the source code and found which issues were legitimate or someone did so on your behalf?
    • bawolff 9mo ago
      I read the specific examples that the maintainers of each project gave. The ones the ffmpeg maintainers complained about appeared to be real bugs. In fact i dont think the ffmpeg maintainers even dispute that. The ffmpeg maintainers after all fixed the issue in question. The ones the curl maintainers gave were clearly nonsense. The curl maintainers did not fix the issue because there was nothing to fix because the report didn't actually report anything that could be fixed because it made no sense.
      • groundzeros2015 9mo ago
        Can you acknowledge you have limited information about the contents and quality of another projects bug reports?