Comment 25 for bug 1365350

Revision history for this message
Samuel Merritt (torgomatic) wrote : Re: Metadata constraints defined in openstack documents doen't match implementation

@Rajaneesh Singh: Typically, people don't submit competing patches. That is, if person A is working on fixing a particular bug, person B will not also work on fixing that bug.

However, as you've seen here, there are exceptions. In this case, you turned this bug from a private security vulnerability, for which the fix could take a while without a problem, and turned into a public security vulnerability by publishing a patch to Gerrit, thus requiring the fix to be merged expeditiously. Now, the patch you submitted broke existing unit tests, functional tests, and even the pep8 checks. However, since you took no action on fixing the test failures for two weeks, and a release deadline was coming up, and the CVE was public, someone else had to step in and fix the bug properly. Here, Richard Hawkins stepped in and submitted an alternate patch for this security hole, and had he not done so, I would have.

Note that this was only necessary due to the broken embargo on this security vulnerability. As I said earlier, normally people stay out of each others' way.