Decade Old KDE Bug Fixed
hypnosec writes "How long does a bug take to get resolved? A week? A month? A year? Well, a bug prevalent in the KDE libraries since 2002 has finally been resolved after a decade it has been revealed. The bug was present in the "Reject Cross-Domain Cookies" feature of KDE Libraries. Thiago Macieira noted in the KDE Libraries Revision 974b14b8 that he observed that his web cookies were being forgotten following a kded restart."
Maybe a little of both. Clearly, they had other priorities and this just fell through the cracks.
"turns out that mCrossDomain was of value 127": For some reason reminds me of the time Linus blew up at Mauro a little while ago also for returning a value that makes no sense (made worse by dancing around the issue).
If computers were people, I'd be a misanthrope.
There are bugs much older than this in the wild. Publishing this arcane factoid will just make the KDE devs feel inadequate when our bro Thiago Macieira could have earned a PhD in CS and submitted a patch herself. Can you mod an entire story -1 TROLL?
I've been asking them to get rid of the Start Menu for years and they finally did it with a recent release.
I hope they remove networking capability next and maybe add more DRM.
@SteveBallmer @Microsoft
Mod me down, my New Earth Global Warmingist friends!
I guess it is pretty common... I mean, even recent software has years old lame bugs these days, even big projects like Chrome has issues like:
https://code.google.com/p/chromium/issues/detail?id=255
(and that is a bug you can hit every single day of normal web browsing...)
The quality of Slashdot comments has really gone downhill.
How long does a bug take to get resolved? A week? A month? A year?
You said "decade old" in the title, dumbass!
Heh, gratz for fixing that one. KDE is the best UNIX DE. Reasonably fast, relatively robust, smooth to use, and very configurable. Lots of nice apps and widgets to play with, too.
Restarting KDE every ten years sounds about right.
...
...LOL I couldn't finish that lame old quote with a straight face.
https://bugzilla.gnome.org/show_bug.cgi?id=121113
If you read another developer's response to this commit you will see that the actual feature (reject cross domain cookies) was not affected by this blunder: instead the issue was completely different and only occurred when the KDE daemon was restarted.
A CC-licensed illustrated horror novel
There are bugs much older than this in the wild. Publishing this arcane factoid will just make the KDE devs feel inadequate when our bro Thiago Macieira could have earned a PhD in CS and submitted a patch herself. Can you mod an entire story -1 TROLL?
Who cares?
What a arrogant comment. I care and thousands of other KDE users care.
Microsoft has an entire bug-based OS 27 years old and counting.
People work on problems that are (a) fun to solve and (b) will bring them acclaim.
Tiny, ugly, boring bugs don't do that and so in many software projects they get overlooked the longest.
Futurist Traditionalism
The identity of the developer responsible for the bug still remains unknown. A 10,000 bit coin reward has been posted for information leading the discorvery of his name and/or whereabouts. And in other news, Linus Torvalds has just announced.......
No, it's about the same. There is just more of them. Moderation doesn't scale well.
I hadn't noticed, actually. Of course, the world-famous Anonymous Coward has been here much longer than I have. With a UID of zero, I guess you would know!
"Windows is like the faint smell of piss in a subway: it's there, and there's nothing you can do about it." - Charlie Br
Did you file a bug report? No? Then you didn't care very damned much.
"Windows is like the faint smell of piss in a subway: it's there, and there's nothing you can do about it." - Charlie Br
...Slashdot reported on a 25 year old BSD bug being resolved back in May 2008.
And these are just the ones we know about -- there may be yet older bugs (particularly in proprietary, closed-source systems, where the source cannot be reviewed by the general community).
Don't start asking about the number of decade-plus bugs that exist in Thunderbird. More than I could count on my entire family, or probably even entire workplace teams fingers and toes.
I have never seen a code base that does not have bugs as old (or older) than the date the bug tracker was put in place.
This is totally normal.
Sorry to spoil the fun, but the developer who found the bug fixed it "after a few months" according to the check-in comment. The code may have been buggy for a decade, but that doesn't mean that anybody was affected during that time. Once someone was affected (the developer), it was fixed in a much shorter timescale than this article makes you believe.
After RTFA (I know, broke the rules), it appears it wasn't a documented or tracked bug. It was noticed and fixed more than a decade after it was created. Pretty much non-news. If no one ever noticed or cared that their cookies were getting lost on a kde restart then how can you expect it to get fixed? If no one calls it a bug, is it actually a bug?
"With enough eyeballs all bugs are shallow" Right?
Well, the theory of the many eyes say that someone somewhere should have noticed/reported/tracked this bug sooner rather than later.
this comes to prove that many eyes are NOT enough. First you need more than merely many eyes, you need many QUALIFIED eyes.
Second, you need to complement your (many) eyes with systematic test cases to so some QA, trying ad a modicum of rigor, instead of, you know, letting the QA become an ad-hoc subjective process...
*** Suerte a todos y Feliz dia!
Perhaps that means there is still hope that the IE Accept bug, documented sixteen years ago, will eventually get fixed. Microsoft did release a partial workaround after fourteen years.
Good job you're all reading the source and making your contributions. Except you're not.
Linux may as well be propitiatory for most of its users
KDE is known for bugs unfixed for years - another one https://bugs.kde.org/show_bug.cgi?id=224447 . 58 users hitting this one (which is a log for a bug reporting system) for 3 years already.
Just this month, they have fixed bugs that were originally reported in 2000 and 2001.
This is not a bug to me
How come no took over these very old issues to fix? Did no one care for them? :( I would fix them if I could code.
Ant(Dude) @ Quality Foraged Links (AQFL.net) & The Ant Farm (antfarm.ma.cx / antfarm.home.dhs.org).
I didn't know the Oracle Java development team also worked on KDE.
It must have been something you assimilated. . . .
The quality of Slashdot comments has really gone downhill.
Really? I liked that one. Droll wit indeed. Deserves upmodding.
When all you have is a hammer, every problem starts to look like a thumb.
Take a look at this one: http://www.freebsd.org/cgi/query-pr.cgi?pr=bin/128587
One byte, two years.
By the way, how can one say FreeBSD a state-of-the-art system, they used *this* installer for twenty years.
- Hey, we've got a new mirror, let's recompile!
I always laugh at this excuse. I would say 90% of nix users do not file bug reports because of how lousy the bug report system is to non-developers in a lot opensource applications. Then if those people do post a bug report and due to their inexperience, they get shunned out of existence. I've seen it happen all the time. I once told a guy to send a bug report, he never did, and I asked him why and he said it was just too much crap to do. I've even seen patches get shunned. Just take a look at Asterisk and the bluetooth module. Thing has been broken for years and there's a patch on the bug report that's been sitting there for years and works great, but never implemented to mainline, thus it has been broken every damn release because no one wants to implement it (Yes, the patch works, I have to recompile every release).
There's a lot of unreported bugs for a lot of applications due to this and the excuse of "I'm not going to fix it because it wasn't reported on our lousy bug report system, but posted on a forum", is no excuse at all. We're led to believe opensource is safer, when in reality it's turning into a bureaucratic mess of ego maniacs (Gnome) and proper submission form (KDE), that's opening holes in a lot of the applications we enjoy.
I personally like Mozilla's new way of bug reports, where you can send it directly from the browser with the submit feedback and they made it as simplest as possible. They have the right idea, most of the opensource community does not.
This makes me hope that 2017 will be the ETA for the fix of this one :-)
Obligatory disclaimer: no, I can't learn a new (for me) language and a new toolchain to fix it. I'll live with the bug as I did for three years.
Anyone who has worked on large projects knows that a lot of bugs keep getting punted year after year because they aren't serious, affect very few users etc.
Did you file a bug report? No? Then you didn't care very damned much.
I didn't even know the bug existed until i saw this article.
And yes I damned very much do still care.
Runaway1956 I take it you are a linux developer or a linux app developer ? Your lame response speaks for itself.
Thank you for the backup. For the most part I think you hit the nail right on the head.
I've submitted bugs for dozens of different distros and even been involved in development of some.
I'm not a developer. I've submitted bugs and patches (all complete & without error). But because i'm not a developer or in their "click" *GASP!* my bugs are suddenly unworthy of the ego maniacs that run the upstream and mainline branches.
propitiatory? How do you pronounce that, Ballmer-boy?
While researching a problem that I was having with GTK back about 4 years ago, I discovered that I was ramming headfirst into a 20 year old focus related problem, that will likely never be fixed, and therefore will always render Gnome a useless pile of crap (in addition to the horrific user interface that they've grafted onto it over the last 8 years or so).
There was a nearly 40 year old bug fixed in one of the base Unix tools, about a year or two ago.
In Microsoft's XP operating system, you can't name a folder (or subdirectory, in standard terminology) 'aux'.
Not to mention that every Windows system since 3.0 has the bug where the name on a CD is assigned to be the CD drive name and remains assigned even after the CD disk is exchanged with another.
These bugs probably won't get fixed until the original Voyager space probe circles the galaxy and returns to earth.
has the "ksirtet is no longer in kdegames bug" been ongoing?
MSIE: The world's most standards-complaint web browser.
Everything Linux SUCKS
I'm sure he meant Propeciatory—as in, "Linux makes you grow a beard".
I reported a bug, which was accepted, in NeXTStep 0.8 or so. Last I checked, it's still in OS X. (LoginWindow won't let you enter control characters as part of a password.)
My blog: http://www.seebs.net/log/ --- My iPhone/iPad app: http://www.seebs.net/seebsfrac/
Please give examples of 3 bugs you've submitted.
from now on, January 18 "Thiago Macieira Appreciation Day".
Easy: give it some duct tape and a magnifying glass, then stand back.
Yeah, right.
That's a necessity to prevent hacking of the Internet from our OS, for which we remain criminally liable.
We just need to ensure that the decryption keys are only ever issued on a robust one-time-use policy over the network, after the user has paid their pay-per-view fees for that viewing of the content. As our corporate customers have been demanding for years. We've got to get rid of the current thing of storing the keys on the media itself, because those hackers will always find a way to break such a scheme.
Regards, Bill
(But Steve, you've been in post for a decade or so now, and I'm retired. So why am I having to wipe your arse on basic topics like this. And what are you doing with that chai $£&$^$£&* NO CARRIER
Birds are not dinosaur descendants;birds are dinosaurs, for all useful meanings of "birds", "are" and "dinosaurs"
You fixed it for yourself... +1
Uh, Linux geek since 1999.