[Namazu-devel-en] Re: [PATCH] potential buffer overrun in namazu.cgi?

Tadamasa Teranishi yw3t-trns at asahi-net.or.jp
Thu May 18 03:13:24 JST 2006


Derek Atkins wrote:
> 
> >  ex) 2.0.17pre1
...
> approach to release engineering..  The time to release a 2.0.17pre1
> and then a 2.0.17 is no more significant than the time to release a
> 2.0.17 and then a 2.0.18, so why release pre-releases?

This is a story only that coding assumed that VERSION is within 9 
characters is dangerous. 

> That's fine, but I'm not running against CVS, and you haven't released
> a 2.0.17.

Even if CVS cannot be used, tarball can be acquired from the 
following URL. (Example: stable-2-0)

http://cvs.namazu.org/namazu/?only_with_tag=stable-2-0

> The correction of stability version (stable-2-0) source of CVS has 
> corrected and development version (HEAD) sources. 

It corrected it to stability version (stable-2-0) ahead. 
-- 
=====================================================================
TADAMASA TERANISHI  yw3t-trns �� asahi-net.or.jp
http://www.asahi-net.or.jp/~yw3t-trns/index.htm
Key fingerprint =  474E 4D93 8E97 11F6 662D  8A42 17F5 52F4 10E7 D14E



More information about the Namazu-devel-en mailing list