From 5fad2c93bc161ab387de5810d9fa15b42893f702 Mon Sep 17 00:00:00 2001 From: "Dr. Stephen Henson" Date: Mon, 11 Nov 2013 14:40:07 +0000 Subject: Update FAQ --- FAQ | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/FAQ b/FAQ index e1b04a5288..9543e4ab07 100644 --- a/FAQ +++ b/FAQ @@ -738,6 +738,7 @@ never make sense, and tend to emerge when you least expect them. In order to identify one, drop optimization level, e.g. by editing CFLAG line in top-level Makefile, recompile and re-run the test. + * I think I've found a bug, what should I do? If you are a new user then it is quite likely you haven't found a bug and @@ -746,6 +747,11 @@ documentation and the mailing lists for similar queries. If you are still unsure whether it is a bug or not submit a query to the openssl-users mailing list. +If you think you have found a bug based on the output of static analysis tools +then please manually check the issue is genuine. Such tools can produce a +LOT of false positives. + + * I'm SURE I've found a bug, how do I report it? Bug reports with no security implications should be sent to the request -- cgit v1.2.3