Re:Backdoor in upstream xz/liblzma leading to SSH server com...
by mongol on Friday March 29, 2024 @06:16PM
(#39869580)
Interesting that one of the commits commented on update of the test file that it was for better reproducibility for having been generated by a fixed random seed (although how goes unmentioned). For the future, random test data better be generated as part of the build, rather than being committed as opaque blobs...
[ Parent
| on HN ]
Re:Backdoor in upstream xz/liblzma leading to SSH server com...
by WhyNotHugo on Saturday March 30, 2024 @10:44AM
(#39875370)
I agree on principle, but sometimes programmatic generating test data is not so easy.
E.g.: I have a specific JPEG committed into a repository because it triggers a specific issue when reading its metadata. It's not just _random_ data, but specific bogus data.
But yeah, if the test blob is purely random, then you can just commit a seed and generate in during tests.