News for hackers. Stuff that matters.

A comment on Heap-based buffer overflow in Sudo. Parent comment

Re:Heap-based buffer overflow in Sudo by bnroberts on Tuesday January 26, 2021 @06:17PM (#25922188)
Single persons often have superhuman standards. It is easy to see that most of the best works in math or art were produced by an individual.

Code review can work, but often it doesn't. There are countless examples of projects with "strict" review requirements that have similar issues (whereas qmail only had one).

Writing tests is the important thing, it keeps you honest.

[ Parent | on HN ]
Re:Heap-based buffer overflow in Sudo by jeffbee on Tuesday January 26, 2021 @06:19PM (#25922207)
31 CVEs later I think it's safe to say that this particular author does not possess superhuman standards. How much more evidence would we need?
[ Parent | on HN ]