Re: CVE request - Linux kernel: VFAT slab-based buffer overflow

["Jason A. Donenfeld" <Jason () zx2c4 com>]

On Thu, Feb 28, 2013 at 12:17 AM, Daniel Kahn Gillmor
<dkg () fifthhorseman net> wrote:
> Even if this were true, it takes much more than a single cycle to write
> up a decent security report that can be understood by other people.
> Communication takes time and effort.  Good communication takes even more
> time and effort.

I agree with this. I was referring to Greg's first mentioned stage of
classifying the bug, which for some cases is easy, though, as I said,
not in all cases. What you refer to is Greg's mentioned second stage,
of notification. This often can indeed be time consuming, as you
mentioned.