security alerts in busybox
Aaro Koskinen
aaro.koskinen at iki.fi
Fri Apr 24 20:29:04 UTC 2026
Hi,
On Fri, Apr 24, 2026 at 08:00:55PM +0200, Roberto A. Foglietta wrote:
> > On Fri, Apr 24, 2026 at 07:30:22PM +0200, Roberto A. Foglietta wrote:
> > > (1) These are trivial alerts, therefore I faced it first to provide an
> > > example. [...] And the second main question is straightforward: (2)
> > > does this fix worth 177 bytes? In relative terms it is 150 ppm
> > > compared with the full size footprint. In terms of certifications is a
> > > solid step towards peace of mind.
> >
> > IMHO, it does not make sense to churn the code just to silence some
> > random unnamed tool without any real proper reason, and it certainly
> > does not give any piece of mind.
>
> I read: "random unnamed tool" -- I see what is the information you are
> seeking for... LOL
I'm not seeking any information, I just think Busybox should ignore your
tool and your patch altogether.
A.
More information about the busybox
mailing list