19 ms·
> uutils now runs the upstream GNU coreutils test suite against itself in CI. That’s the right scale of defense for this class of bug. That's the minimum, it is
by micheles 5mo ago
> uutils now runs the upstream GNU coreutils test suite against itself in CI. That’s the right scale of defense for this class of bug.
That's the minimum, it is absurd that they did not start from that!
- aw1621107 5mo agoLooks like they've been doing at some kind of automated comparison against the GNU test suite since 2021 or so [0]? [0]: https://github.com/uutils/coreutils-tracking/commits/main/?after=e948aa9447568cbd3cf5484d56e25cb003c8f359+11500 https://github.com/uutils/coreutils-tracking/commits/main/?a...
- jeroenhd 5mo agoI recall the last time there was a massive bug in the uutils project, it was because the coreutils tests didn't cover some crucial aspect people relied on. Running these tests is useful for compatibility and all, but it won't necessarily catch security issues.
- ordu 5mo agoI believe they did it all the time. Maybe it was not automated? But they boasted in news multiple times how many coreutils tests they are passing. I suspect that those tests are useless for security, they are more about compatibility or something like that.