Date 1 - 1 of 1
Who is looking at CVEs to prevent them?
Dan Carpenter <error27@...>
On Tue, Mar 07, 2023 at 07:00:29PM +0800, Hillf Danton wrote:
On 7 Mar 2023 12:51:14 +0300 Dan Carpenter <error27@...>Yeah. Really just posting the code and the results seems like the bestOn Thu, Jan 19, 2023 at 09:14:53AM +0900, Masami Ichikawa wrote:Given the syzbot reports only in the past three years for instance, theCVE-2023-0210: ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE inSorry, I have kind of hijacked the cip-dev email list... I use these
way forward to me too. That's how syzbot does it and it's the only
realistic way forward.
The good thing is that static checker warnings are much easier to
analyse than syzbot warnings.
I've sent you the complete list just so you can see what there is.instructions for how to find these yourself are kind of right there inIf no more than three warnings you will post a week after filtering, feel
I want to get out of the filtering business as much as possible. I want
more people involved at all stages really. Writing checks. Reviewing
|1 - 1 of 1|