Subject: Re: download-vulnerability-list bug?
To: Alistair Crooks <agc@wasabisystems.com>
From: Greg A. Woods <woods@weird.com>
List: tech-pkg
Date: 10/21/2002 12:28:53
[ On Monday, October 21, 2002 at 16:00:19 (+0200), Alistair Crooks wrote: ]
> Subject: Re: download-vulnerability-list bug?
>
> On Mon, Oct 21, 2002 at 10:55:34PM +0900, itojun@iijlab.net wrote:
> > >> 	i know the above comment, however, i don't think it actually work well.
> > >> 	please look at the message which started the thread again.
> > >> 	for instance, if the previous person who have committed the file has
> > >> 	N letters in his netbsd.org account (like "christos", 8 letters)
> > >> 	and the next person who commits has M letters (like "agc", 3 letters),
> > >> 	a dummy garbage has to be added if the commit adds less than
> > >> 	N-M letters???  i don't think it a reasonable rule.
> > >
> > >I will buy a beer for the developer who can get a whole
> > >"vulnerabilities" line entry into 5 (== 8 - 3) characters.  In fact,
> > >I'll be generous, and won't count the newline character at the end.
> > 
> > 	you don't seem to understand what i'm talking about.
> > 	when you change some URL in the vulnerabilities list (for instance),
> > 	you need to make sure that the URL gets 6 letters longer than before,
> > 	at least, in the above case.
> 
> I'd refer you to the following revision of the pkg-vulnerabilities file:
> 
> ----------------------------
> revision 1.52
> date: 2001/06/06 23:46:35;  author: wiz;  state: Exp;  lines: +2 -1
> Add comment line to grow file size to be bigger than v1.49 again.
> The added line should be deleted during the next update and has been
> kept short for that reason.
> ----------------------------

That's a _HUGE_ amount of hoop-jumping over-complicated accounting just
to satisfy a rather poorly designed integrity check.  It's doubly worse
considering the purpose of the content of that file.

-- 
								Greg A. Woods

+1 416 218-0098;            <g.a.woods@ieee.org>;           <woods@robohack.ca>
Planix, Inc. <woods@planix.com>; VE3TCP; Secrets of the Weird <woods@weird.com>