linux-kernel - Re: Number of bugs

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <20080522191733.GF2727@cs181133002.pp.htv.fi>
Date:	Thu, 22 May 2008 22:17:33 +0300
From:	Adrian Bunk <bunk@...nel.org>
To:	Stefan Richter <stefanr@...6.in-berlin.de>
Cc:	Arjan van de Ven <arjan@...radead.org>,
	Bosko Radivojevic <bosko.radivojevic@...il.com>,
	linux-kernel@...r.kernel.org
Subject: Re: Number of bugs - statistics

On Thu, May 22, 2008 at 07:45:40PM +0200, Stefan Richter wrote:
> Adrian Bunk wrote:
>> On Thu, May 22, 2008 at 06:22:57PM +0200, Stefan Richter wrote:
>>> Adrian Bunk wrote:
>>>> And ALSA alone has 2000 open bug reports, which makes the open ACPI 
>>>> or SCSI bug numbers relatively irrelevant in any "number of bugs"  
>>>> statistics.
>>> Central facilities like ACPI and SCSI having relatively few [and
>>> according to Arjan a decreasing number of] reported unfixed bugs is...
>>> irrelevant?
>>
>> Yes, _in any "number of bugs" statistics_ that is irrelevant.
>
> Well, yes, in any "simplistic total number of bugs without any frame of  
> reference what is actually counted" statistics it is indeed irrelevant.

But this kind of statistics is the only one we could realistically ever 
get.

There is no simple and correct way to e.g. say whether some ACPI bug is 
more or less bad than some ALSA bug or which of them might affect more 
people.

> [...]
>> We do not even have good data for "number of bug reports".
>
> That's right.  We don't have comprehensive data, and it is difficult to  
> draw conclusions from the data that we have.
> 
> Stefan Richter

cu
Adrian

-- 

       "Is there not promise of rain?" Ling Tan asked suddenly out
        of the darkness. There had been need of rain for many days.
       "Only a promise," Lao Er said.
                                       Pearl S. Buck - Dragon Seed

--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/