[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#898431: lintian.debian.org should emit source-contains-prebuilt-wasm-binary (backport file?)



Package: lintian
Version: 2.5.84
Severity: important
Tags: security
X-Debbugs-CC: secure-testing-team@lists.alioth.debian.org
X-Debbugs-CC: ftpmaster@ftp-master.debian.org

Hi,

source-contains-prebuilt-wasm-binary source tag is not emitted due to
too old file.

wasm is a crap over a crap of nodejs communauty. It is compiled javascript.

Node often include it without source and this will end in the archive.

Why js file even minified an human could with some hard work undestand
security implication.

With wasm, it is near impossible to understand.

So it is important to be sure that wasm file are compiled from source
(thus security bug), and maybe
should raise an ftpmaster autoreject.

So could we try to get file on  lintian.debian.org to detect wasm ?

Bastien


Reply to: