Comment by omcnoe

14 days ago

My understanding is the uutils development process involved extensive testing against the behaviour of the original utilities, including preserving bugs.

But we still have CVE's for trivial things? I mean just a medium sized test suite for "rm" alone should probably be many thousand test cases or so. And you'd think that deleting "." and "./" respectively would be among them? Hindsight is always 20/20 and for inputs involving text input you can never be entirely covered, but still....

If something as basic as "rm ./" is broken, the word "extensive" does not apply to whatever testing there was.