On Thu, 30 Mar 2017 08:57:40 -0400 Michael Stone <mst...@debian.org> wrote:
> On Thu, Mar 30, 2017 at 01:13:22PM +0200, Antonio Diaz Diaz wrote: > >(i.e. checking the data before decompressing it) is not enough > >because the probability of undetected decompression errors is not > >negligible. > > And yet, the reports of crc errors being triggered in the real world > seem pretty sparse, no? This seems like one of those issues where > there's a set of people who get really, really passionate over it, > but the real impact seems pretty negligable. > Maybe it doesn't happen often but that is not a good argument -- it will happen.
pgpGLcJ0TuMii.pgp
Description: OpenPGP digital signature