News for hackers. Stuff that matters.

A comment on CVE-2015-8126: Multiple buffer overflows in libpng. Parent comment

Re:CVE-2015-8126: Multiple buffer overflows in libpng by Asbostos on Saturday November 14, 2015 @10:51PM (#10568409)
Static linking may be bad for security but good for saving hours of frustration. It's a trade-off and it's not clear that security is automatically the most important thing always.

Just look at any forum about some open source software. There'll usually be endless posts from people complaining that they can't compile it because of some weird dependency errors. These are really widespread and time-wasting problems.

[ Parent | on HN ]
Re:CVE-2015-8126: Multiple buffer overflows in libpng by librarian42 on Sunday November 15, 2015 @09:52AM (#10569732)
Unnecessary dependencies are a bug. I've seen people pull in half a dozen nested libraries just to avoid writing ten lines of code. Sometimes re-inventing the wheel is the right thing to do.
[ Parent | on HN ]