| |||||||||||||
Kernel.org's road to recoveryKernel.org's road to recoveryPosted Oct 6, 2011 23:24 UTC (Thu) by fuhchee (subscriber, #40059)In reply to: Kernel.org's road to recovery by dlang Parent article: Kernel.org's road to recovery
"Analysing the fix to tell if there are security implications of the fix is a separate step that requires a very different mindset than just fixing the problem in the first place"
If truly this is beyond the talented engineers, perhaps they could familiarize themselves with the CWE labeling system [1], which merely classifies the bug being fixed, and does not require the different mindset skill of actually exploiting the problem.
[1] http://nvd.nist.gov/cwe.cfm
(Log in to post comments)
|
|||||||||||||