full-disclosure - FIREFOX flaws: nested array sort() loop Stack overflow exception

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <41AC180D.2060400@cruzio.com>
From: dveditz at cruzio.com (Daniel Veditz)
Subject: FIREFOX flaws: nested array sort() loop Stack
 overflow exception

Jose Nazario wrote:
> benefits of forcing/encouraging registration include:
> 	- garaunteed line of followup
> 	- reduced spam quantities in bugzilla
> 	- at leasta cutofof "i care enough to ..."

Currently more than half of the bugs that do get filed end up wasting time
rather than helping (duplicates, invalid, already fixed in a newer version,
no one else can reproduce). These are not minor benefits, the situation
would be far worse with drive-by bug reporting.

> still, you're losing more than you may expect. i know i've failed to file
> bug reports (non-security related) for mozilla products due to this "speed
> bump".

It is a real problem, knowing where to draw the line is hard. For people who
don't wish to get as involved there are other places bugs could be reported
more informally (newsgroups, web forums, irc) and other volunteers would
most likely file the bugs for you if they can be reproduced.
http://www.mozilla.org/support/#community

-Dan Veditz