Linux Founder Linus Torvalds Stays Vigilant Against Harmful Code Contributions
In a recent development, a controversy surrounding the Linux kernel has been resolved amicably. The issue revolved around Kees Cook, a significant contributor to the Linux community, who submitted a series of pull requests that raised concerns.
Kees Cook, known for his contributions to the Linux kernel, found himself at the centre of a debate when he was accused of submitting duplicate patches and re-listing Linus Torvalds, the vigilant guardian of the Linux kernel, as the author. A total of 330 pull requests were found to be involved in this incident.
Linus Torvalds, renowned for his watchful eyes and quick temper, expressed his concern over the issue. This was followed by constructive communication among Kees, Linus, and Konstantin Ryabitsev, a Linux kernel developer who plays a crucial role in maintaining the kernel's release process and managing contributions during Linux kernel development events.
The root cause of the issue was traced back to an unintended rewrite of commit metadata during history rewriting by the B4 tool. Some form of scripting (automation) was likely involved in the incident. Kees Cook later clarified that the issue might have been caused by a faulty SSD that resulted in corrupt trees and broken merges.
The fake merge commits included incorrect SHA-1 signatures, which further compounded the issue. Linus Torvalds, however, remained skeptical of Kees Cook's explanation, considering the action "actively malicious."
Despite the initial concerns, Kees Cook apologized for the mistake and agreed to get rid of the affected tree and rebuild the patch set cleanly before resubmitting. Linus Torvalds, while still maintaining a watchful eye, acknowledged the apology and the steps Kees Cook has taken to rectify the situation.
The whole thread of the conversation can be checked for more details. It's a reminder of the importance of transparency and accountability in the open-source community, and a testament to the constructive communication that can resolve even the most complex issues.