I'm using CVS 1.10.7 on Mandrake Linux.  Yesterday I issued the following
erroneous cvs diff command against the Python repository at SourceForge:

    cvs diff -C Modules/readline.c Lib/rlcompleter.py

The -C diff flag should have been -c.  CVS segfaulted and left two read
locks behind.  This caused no end of problems because SourceForge doesn't
allow project admins or developers to remove stale locks.  Instead, a
support request must be submitted to SourceForge, which slows down the
developers as they wait for SF to clear the lock.

I didn't see this in the list of known bugs on the CVSHome.org web site, so
thought it might be a bug in the current release.

Note that if this is a bug in CVS it's a rather serious one, because it
would allow bad guys with minimal access to large CVS repository collections
(like Open Avenue or SourceForge) to create large numbers of read locks very
easily, thus bringing large numbers of projects to a grinding halt.

-- 
Skip Montanaro, [EMAIL PROTECTED], http://www.mojam.com/, http://www.musi-cal.com/
"To get what you want you must commit yourself for sometime" - fortune cookie

Reply via email to