linux-kernel - Re: Zero bugs (was Re: (Short?) merge window reminder)

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <20110529000325.07f5633a@schatten.dmk.lab>
Date:	Sun, 29 May 2011 00:03:25 +0200
From:	Florian Mickler <florian@...kler.org>
To:	Valdis.Kletnieks@...edu
Cc:	linux-kernel@...r.kernel.org, Keith Curtis <keithcu@...il.com>
Subject: Re: Zero bugs (was Re: (Short?) merge window reminder)

On Fri, 27 May 2011 10:29:32 -0400
Valdis.Kletnieks@...edu wrote:

> On Thu, 26 May 2011 22:44:24 PDT, Keith Curtis said:
> 
> > However, it is common in companies to make an effort to get towards
> > zero bugs. Zero bugs is impossible, and that is a philosophical
> > discussion. If you look through your current list of bugs, nearly
> > every one looks scary to me and important to someone. You currently
> > have 2,800 active bugs (http://bit.ly/LinuxBugs) The last time I
> > looked, I found the median age was 10 months. In general, bugs should
> > be fixed in the next release and so therefore 3 months.
> 

Besides the valid points Valdis gave, also many of the bugs (if they
are severe/real world bugs) are already fixed. That is because the
bugzilla is not the only place where bugs are reported and resolved and
only the original submitter and some other people are able to close bugs. 

Most of the development happens on the mailinglist. So this
is also where most of the bugs get solved. 

( Mailinglists also have the advantage of automatically garbage
collecting old bug reports nobody has any interest in solving. This is
a big drawback with bugzilla. If there is too much garbage in the
bugzilla because nobody closes bugs, then developers will not take old
bugzilla reports seriously. )

So if you want to make the bugzilla more useful, just go for it and put
relevant people  on the cc list of ignored bug reports, ping people that have not
answered to a specific question for months (the bugzilla looses
notification mails sometimes).. And if you determine bugs that can be
closed, drop me a line, I will be happy to do that, if it is
appropriate.

Regards,
Flo
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/