From owner-cvs-all Thu Jan 18 18: 5:44 2001 Delivered-To: cvs-all@freebsd.org Received: from fw.wintelcom.net (ns1.wintelcom.net [209.1.153.20]) by hub.freebsd.org (Postfix) with ESMTP id 2595737B698; Thu, 18 Jan 2001 18:05:21 -0800 (PST) Received: (from bright@localhost) by fw.wintelcom.net (8.10.0/8.10.0) id f0J25KY18202; Thu, 18 Jan 2001 18:05:20 -0800 (PST) Date: Thu, 18 Jan 2001 18:05:20 -0800 From: Alfred Perlstein To: "Brian F. Feldman" Cc: Kris Kennaway , cvs-committers@FreeBSD.org, cvs-all@FreeBSD.org Subject: Re: cvs commit: ports/net/micq Makefile Message-ID: <20010118180520.U7240@fw.wintelcom.net> References: <200101190158.f0J1wB201566@green.dyndns.org> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.2.5i In-Reply-To: <200101190158.f0J1wB201566@green.dyndns.org>; from green@FreeBSD.org on Thu, Jan 18, 2001 at 08:58:11PM -0500 Sender: owner-cvs-all@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG * Brian F. Feldman [010118 17:58] wrote: > Alfred Perlstein wrote: > > * Kris Kennaway [010118 15:45] wrote: > > > kris 2001/01/18 15:45:14 PST > > > > > > Modified files: > > > net/micq Makefile > > > Log: > > > Remotely exploitable buffer overflow; FORBIDDEN. > > > > > > Submitted by: recidjvo via Bugtraq > > > > "Obtained from" he did us no direct favors. > > Submitted by applies to people, but Obtained from implies that the work to > obtain it was done by FreeBSD's committers, therefore I'd say the correct > thing in this case would be: > > Obtained from: Bugtraq (recidjvo ) > > This makes it clear that the report was gotten from a public source but not > sent in. > > Can we make this the accepted form for situations like this, if there are > no strong objects? I say strong because I don't want to help create a > bikeshed problem... I agree, I was also wondering about situations where someone does submit something however it's redone a bunch my the person who it was submitted to. 'Pointed out by' doesn't give the submitter the credit he deserves for at least trying to supply a diff, but 'Submitted by' gives too much credit when the diff was actually reworked. I've seen 'Submitted (in a different form) by' and I like that. Does that work? Anything better? -- -Alfred Perlstein - [bright@wintelcom.net|alfred@freebsd.org] "I have the heart of a child; I keep it in a jar on my desk." To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe cvs-all" in the body of the message