security alerts in busybox

Aaro Koskinen aaro.koskinen at iki.fi
Fri Apr 24 17:44:55 UTC 2026


Hi,

On Fri, Apr 24, 2026 at 07:30:22PM +0200, Roberto A. Foglietta wrote:
> (1) These are trivial alerts, therefore I faced it first to provide an
> example. [...] And the second main question is straightforward: (2)
> does this fix worth 177 bytes? In relative terms it is 150 ppm
> compared with the full size footprint. In terms of certifications is a
> solid step towards peace of mind.

IMHO, it does not make sense to churn the code just to silence some
random unnamed tool without any real proper reason, and it certainly
does not give any piece of mind.

A.


More information about the busybox mailing list