* Dennis Peterson wrote:
> On 9/21/10 9:55 PM, Nathan Gibbs wrote:
>> 
>> Now will the REAL C CODERS PLEASE STAND UP! Do it right and show me how 
>> its done. Better yet, just do it right the first time, and I won't say a 
>> thing.
> 
> Got your ECR submitted? Has change board seen it, approved it, and slotted 
> it in the priorities chart? Is it at the top of the chart? Got your design 
> documents done, identified your metrics for success? Got your functional 
> tests designed and approved?
> 

Very good points, all of them, which is why I have said and continue to say
that I don't know what I'm doing.

> You've coded it so we assume the above is completed. What are the chances 
> you've done regression testing in all supported environments using all 
> supported compilers?

As stated, I don't know what I'm doing.

> Subjected your code for peer review?

Done last night.
http://www.cmpublishers.com/oss/clamfi.c

> Has QA signed off on it?

That would be amazing, but I highly doubt that the Quality of my butcher work
would stand.

> Is your confidence level sufficiently high that you are willing to put your
> code out for the public's consumption

As stated, Already did.

> and you are ready to support it if it breaks stuff?
> 

0.94.x thats all I'm going to say there.
I understand the why, but will never agree with how it was done.
If sourcefire can blow up ClamAV installations all over the world, why should
I worry about my code doing the same thing?

Breakage is a long way off, due to the skill required to get my code into your
clamav source.  Some people could do it, but not everybody.

> If coding were easy anyone could do it, and you've shown it is and anyone 
> can for very simple projects. That's just the beginning.
> 

Precisely my point.
Should I be doing these mods? NO, Absolutely not!
Are they that difficult to implement? Apparently not.
They should be implemented by someone with far more experience than myself.

Last night when I decided to "just for fun" see if I could get the milter to
do what I wanted.  I thought it would end with me erasing my mangled and
nonworking source and unpacking a fresh source from the tarball.  I thought I
would fail miserably.  Imagine my surprise when it worked, especially when you
consider that I don't understand half of that code.  Now imagine my thoughts
about a development team backed by a company that won't implement this.

Those guys could do this better than me any day of the week.  They could code
circles around me, but so far they won't.  what does that tell you?


-- 
Sincerely,

Nathan Gibbs

Systems Administrator
Christ Media
http://www.cmpublishers.com


Attachment: signature.asc
Description: OpenPGP digital signature

_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

Reply via email to