From mboxrd@z Thu Jan  1 00:00:00 1970
X-Msuck: nntp://news.gmane.org/gmane.linux.lib.musl.general/7257
Path: news.gmane.org!not-for-mail
From: Nathan McSween <nwmcsween@gmail.com>
Newsgroups: gmane.linux.lib.musl.general
Subject: Re: buffer overflow in regcomp and a way to find more of those
Date: Mon, 23 Mar 2015 10:21:55 -0700
Message-ID: <CAMSMCxmAfzj6YqQf2WcSreLkj31nEQ1RrcaqPxPJvQm+g-Y9zw@mail.gmail.com>
References: <20150321015619.GU23507@brightrain.aerifal.cx>
	<CAGQ9bdwziW09Jn17M=5+qyi5Q-1+LTy4dr0d0Tkm2WP0ao-NzA@mail.gmail.com>
	<20150321022023.GW23507@brightrain.aerifal.cx>
	<CAGQ9bdwwhkcBse2K612ynZ34SLLCoGvNZTgeMPVK8V-WX56peA@mail.gmail.com>
	<20150321132810.GI16260@port70.net>
	<CAGQ9bdzihNcZoWzpZghnhwwkt3YdwLtBZr3WA_UKn1xL_gzJdQ@mail.gmail.com>
	<20150323123540.GP16260@port70.net>
	<CAA7aPHigO2Dm7deLPTBYAqQ6TCs98jdxME-=xeoeayv0NGdAcg@mail.gmail.com>
	<20150323145317.GQ16260@port70.net>
	<CAA7aPHirY+g5V0fGZ=0OLdeP14J=TYy9SQqASqjeRvu4dNRj+w@mail.gmail.com>
	<20150323162801.GY23507@brightrain.aerifal.cx>
Reply-To: musl@lists.openwall.com
NNTP-Posting-Host: plane.gmane.org
Mime-Version: 1.0
Content-Type: multipart/alternative; boundary=047d7ba9722a1a46530511f7e7e0
X-Trace: ger.gmane.org 1427131331 18152 80.91.229.3 (23 Mar 2015 17:22:11 GMT)
X-Complaints-To: usenet@ger.gmane.org
NNTP-Posting-Date: Mon, 23 Mar 2015 17:22:11 +0000 (UTC)
To: musl@lists.openwall.com
Original-X-From: musl-return-7270-gllmg-musl=m.gmane.org@lists.openwall.com Mon Mar 23 18:22:11 2015
Return-path: <musl-return-7270-gllmg-musl=m.gmane.org@lists.openwall.com>
Envelope-to: gllmg-musl@m.gmane.org
Original-Received: from mother.openwall.net ([195.42.179.200])
	by plane.gmane.org with smtp (Exim 4.69)
	(envelope-from <musl-return-7270-gllmg-musl=m.gmane.org@lists.openwall.com>)
	id 1Ya63E-0004wz-Ps
	for gllmg-musl@m.gmane.org; Mon, 23 Mar 2015 18:22:08 +0100
Original-Received: (qmail 21636 invoked by uid 550); 23 Mar 2015 17:22:07 -0000
Mailing-List: contact musl-help@lists.openwall.com; run by ezmlm
Precedence: bulk
List-Post: <mailto:musl@lists.openwall.com>
List-Help: <mailto:musl-help@lists.openwall.com>
List-Unsubscribe: <mailto:musl-unsubscribe@lists.openwall.com>
List-Subscribe: <mailto:musl-subscribe@lists.openwall.com>
Original-Received: (qmail 21618 invoked from network); 23 Mar 2015 17:22:06 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=gmail.com; s=20120113;
        h=mime-version:in-reply-to:references:date:message-id:subject:from:to
         :content-type;
        bh=DgDLVEfkSwIZOCy8YfoJEUKrye7P0Mzd4Mbaa3xG7lM=;
        b=LbAL4ocJS0l4KAjYgb56CxC770zR9UuWq1PcgEiHlpJ8yj4s2C0cmq2ukUbjdQtpjS
         boQFnOTOUqo3L6CtEc60m37aY9I0MXtCSADxVG3tl7rnwvHjuC0mOeHGDHTCnrVbzZ2r
         vpnPRDi0ZlFPyF0Gq1jRW2PgGXYS5ukNvKKMfplZL8uJ1+Iv7ddVWiotRlfajEd65y3y
         5LN8xHS5ztBEt8l+1sntubMhYVgDwud3dEWBrBaU8YmMDYCade55ax9wq7oUOao3X3rk
         Ievn2b8Oi+vvpVg+65PVp342RiK3hFwGXWPkqC4EU4HFaZdTkL0GNjjN9iWtGX3kzkUH
         mCfg==
X-Received: by 10.194.61.161 with SMTP id q1mr317841wjr.132.1427131315404;
 Mon, 23 Mar 2015 10:21:55 -0700 (PDT)
In-Reply-To: <20150323162801.GY23507@brightrain.aerifal.cx>
Xref: news.gmane.org gmane.linux.lib.musl.general:7257
Archived-At: <http://permalink.gmane.org/gmane.linux.lib.musl.general/7257>

--047d7ba9722a1a46530511f7e7e0
Content-Type: text/plain; charset=UTF-8

> From a release and build system standpoint, it really makes sense to
> do tests separately, not integrated.

I agree but only if there is a good automated continuous integration system
implemented to find bugs. I would run analyzers, etc as a git hook.

--047d7ba9722a1a46530511f7e7e0
Content-Type: text/html; charset=UTF-8

<p dir="ltr">&gt; From a release and build system standpoint, it really makes sense to<br>
&gt; do tests separately, not integrated.</p>
<p dir="ltr">I agree but only if there is a good automated continuous integration system implemented to find bugs. I would run analyzers, etc as a git hook.</p>

--047d7ba9722a1a46530511f7e7e0--