I just needed the versions before 3.x to compare with. The fact that there
has been no CVE since 2007 is good. I'll give you an update if we are able
to publish something involving tcpdump Thanks again.
Cellular (304) 276-8628
Raymond Borges
MSCS/BSCpE
SREB Fellow
CS Ph.D. Student
Lane Departmen
Specifically we are studying how versions fixed vulnerabilities by diffing
the code functions where the CVE states the vulnerability was. We're also
wondering why there are no listed CVEs after 2007 for tcpdump.
http://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=tcpdump
Cellular (304) 276-8628
Raym
> "Guy" == Guy Harris writes:
Guy> (Michael, have you gotten Coverity Scan set up to do either
Guy> nightly or post-commit runs on libpcap and tcpdump?
Guy> http://scan.coverity.com
Guy> That's one way of getting the code checked. I also did a Clang
Guy> Static Humilia
On Mar 18, 2013, at 11:13 AM, Michael Richardson wrote:
>
>> "Raymond" == Raymond Borges writes:
>Raymond> Specifically we are studying how versions fixed
>Raymond> vulnerabilities by diffing the code functions where the CVE
>Raymond> states the vulnerability was. We're also wo
> "Raymond" == Raymond Borges writes:
Raymond> Specifically we are studying how versions fixed
Raymond> vulnerabilities by diffing the code functions where the CVE
Raymond> states the vulnerability was. We're also wondering why
Raymond> there are no listed CVEs after 2007 for
On Mar 15, 2013, at 5:45 AM, Michael Richardson wrote:
> Prior to that it would have been done by the LBL folks... the 3.4
> release was probably 3-4 years earlier.We have the CVS tree back to
> the beginning, and it was imported into git, so there maybe some
> evidence of what it looked lik
> "Raymond" == Raymond Borges writes:
Raymond> I'm doing research on tcpdump and I've been trying to
Raymond> locate the source code for versions previous to 3.5.0 but
Raymond> haven't had much luck. Do you know where I might find
Raymond> these? Thank you.
hi, 3.5 was releas