Libgcrypt maintainer rejects suggestion to use CI and ASan over etiquette(twitter.com)

4 pointsby arthur2e55 лет назад2 comments

Libgcrypt maintainer rejects suggestion to use CI and ASan over etiquette

https://twitter.com/FiloSottile/status/1355194247482384392

2 comments

arthur2e55 лет назад

Linking the Twitter thread for background, since it matters to mention: 1) this is after libgcrypt 1.9.0's "textbook" heap overflow 2) libgcrypt 1.9.1, a security update, breaks --disable-asm builds on x86-64 because they also tried to do feature.

Bug in question is https://dev.gnupg.org/T5279. Won't do any good to post anything there though.

clarifier1235 лет назад

It's a well known fact that GnuPG maintainers are incompetent. My favorite example: https://dev.gnupg.org/T4592?utm_source=cryptography-dispatch...

tl;dr one of the main GnuPG developers doesn't understand how SQLite works and because of that he's going to reimplement it.