<!DOCTYPE html><html><head><title></title><style type="text/css">p.MsoNormal,p.MsoNoSpacing{margin:0}
p.MsoNormal,p.MsoNoSpacing{margin:0}</style></head><body><div>Thanks for the explanation.<br></div><div><br></div><div>So, there is a bug with the new patch but no real security issue thanks to the block padding.<br></div><div><br></div><div>Francois: could you have a look please? <br></div><div><br></div><div>By the way, from our CoC:<br></div><div>"You should, when possible, criticize in private, and praise publicly;
since most of our communications are public and people can be sensitive
about that."<br></div><div><br></div><div>On Wed, Jul 17, 2019, at 08:23, Rémi Denis-Courmont wrote:<br></div><blockquote id="qt" type="cite"><div>Hi,<br></div><div><br></div><div>I was alluding to the nonsensical patch for broken subtitles, committed, pushed and backported in an interval of 3 minutes, which both you and I thought was inadequate.<br></div><div><br></div><div>Here, the bug reporter sent a clear report with test case. He was ignored for days on, in spite of pings. Eventually, he contacted me directly so I tried to make a patch, proof read it, pushed it and waited several days for comments. Nobody commented so I backported.<br></div><div><br></div><div>Then weeks later, François attacks me for introducing a vulnerability in that fix and for creating a CVE. My patch is ugly and wrong but I don't see a vulnerability and I definitely did not create a CVE, though I can see that somebody else did - probably the original bug reporter.<br></div><div><br></div><div class="qt-gmail_quote"><div>Le 16 juillet 2019 22:50:39 GMT+03:00, Thomas Guillem <thomas@gllm.fr> a écrit :<br></div><blockquote class="qt-gmail_quote" style="margin-top:0pt;margin-right:0pt;margin-bottom:0pt;margin-left:0.8ex;border-left-width:1px;border-left-style:solid;border-left-color:rgb(204, 204, 204);padding-left:1ex;"><pre class="qt-k9mail"><div>Hello,<br></div><div><br></div><div>On Tue, Jul 16, 2019, at 18:23, Rémi Denis-Courmont wrote:<br></div><blockquote class="qt-gmail_quote" style="margin-top:0pt;margin-right:0pt;margin-bottom:1ex;margin-left:0.8ex;border-left-width:1px;border-left-style:solid;border-left-color:rgb(114, 159, 207);padding-left:1ex;"><div>Le tiistaina 16. heinäkuuta 2019, 10.35.12 EEST Francois Cartegnie a écrit :<br></div><blockquote class="qt-gmail_quote" style="margin-top:0pt;margin-right:0pt;margin-bottom:1ex;margin-left:0.8ex;border-left-width:1px;border-left-style:solid;border-left-color:rgb(173, 127, 168);padding-left:1ex;"><div><a href="https://www.securityfocus.com/bid/109158/references">https://www.securityfocus.com/bid/109158/references</a><br></div><div><br></div><div>So now we create a new CVE for the out of bound access introduced by the<br></div><div>CVE fix ?<br></div></blockquote><div>You had several weeks to fix this bug better, also plenty of time to comment <br></div><div>before it was backported (unlike a recent certain commit from a certain <br></div><div>somebody), and you still have time to fix it before it gets released.<br></div></blockquote><div><br></div><div>Who is this certain guy ? Which certain commit ?<br></div><div>I don't understand this mail thread, and indirect references don't help me.<br></div><div><br></div><div><br></div><div>> <br></div><blockquote class="qt-gmail_quote" style="margin-top:0pt;margin-right:0pt;margin-bottom:1ex;margin-left:0.8ex;border-left-width:1px;border-left-style:solid;border-left-color:rgb(114, 159, 207);padding-left:1ex;"><div>But clearly, you are more interested in trolling me than being productive. <br></div><div>Point taken.<br></div><div><br></div><div>-- <br></div><div>レミ・デニ-クールモン<br></div><div><a href="http://www.remlab.net/">http://www.remlab.net/</a><hr>vlc-devel mailing list<br></div><div>To unsubscribe or modify your subscription options:<br></div><div><a href="https://mailman.videolan.org/listinfo/vlc-devel">https://mailman.videolan.org/listinfo/vlc-devel</a><br></div></blockquote><div><hr>vlc-devel mailing list<br></div><div>To unsubscribe or modify your subscription options:<br></div><div><a href="https://mailman.videolan.org/listinfo/vlc-devel">https://mailman.videolan.org/listinfo/vlc-devel</a><br></div></pre></blockquote></div><div><br></div><div>-- <br></div><div>Envoyé de mon appareil Android avec Courriel K-9 Mail. Veuillez excuser ma brièveté. <br></div><div>_______________________________________________<br></div><div>vlc-devel mailing list<br></div><div>To unsubscribe or modify your subscription options:<br></div><div>https://mailman.videolan.org/listinfo/vlc-devel<br></div></blockquote><div><br></div></body></html>