[X2Go-Dev] X.org Coverity fixes (from 2006) & nx-libs

[Mihai Moldovan]

On 18.02.2015 04:12 AM, Michael DePaulo wrote:
> While I was backporting the CVE-2015-0255 fix from X.org to nx-libs, I
> noticed that there were a ton of Coverity fixes from 2006 in the X.org
> Xserver:
> http://cgit.freedesktop.org/xorg/xserver/log/?qt=grep&q=Coverity
>
> I backported only one of them as a prereq for CVE-2015-0255:
> http://cgit.freedesktop.org/xorg/xserver/commit/?id=47bdc9528c2dd4ea9d59a0944c023173ea7a7a66
>
> Thoughts/Comments?

This is very alike the general question whether bugfixes from Xorg
should be backported to our current version of nx-libs.

My personal take on that is that this should be low-priority and
backporting is fine when you have spare time on your hands (general "you".)

Within this list, I'd prioritize issues that could crash NX higher than
those merely fixing memory leaks.



Mihai

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 884 bytes
Desc: OpenPGP digital signature
URL: <http://lists.x2go.org/pipermail/x2go-dev/attachments/20150218/4b98597f/attachment.pgp>