News for hackers. Stuff that matters.

A comment on Rsync client-side arbitrary file write vulnerability. Parent comment

Re:Rsync client-side arbitrary file write vulnerability by forgetfulness on Tuesday August 02, 2022 @11:53AM (#32320290)
That's of course on the side of due diligence on the user of any software, but most software should have tests, and certainly one of the importance of rsync, doubly so because it's written in C.
[ Parent | on HN ]
Re:Rsync client-side arbitrary file write vulnerability by trasz on Tuesday August 02, 2022 @01:24PM (#32321672)
Tests aren’t particularly useful for detecting this kind of bugs though.
[ Parent | on HN ]
Re:Rsync client-side arbitrary file write vulnerability by eikenberry on Tuesday August 02, 2022 @06:05PM (#32324860)
You add tests for this sort of thing after the fact to make sure the fix works as you think it does and to make sure the issue isn't re-introduced later. Tests can't find them, but they can help keep them away.
[ Parent | on HN ]