search

ietf-tools / datatracker

The day-to-day front-end to the IETF database for people who work on IETF standards.
https://datatracker.ietf.org
BSD 3-Clause "New" or "Revised" License
568 stars 345 forks source link

Time relation constraint violation cost implicitly assumes only two sessions per group #3353

Open ietf-svn-bot opened 3 years ago

ietf-svn-bot commented 3 years ago

type_defect | by jennifer@painless-security.com

In _calculate_cost_my_other_sessions(), on line 756 the difference in days between the first and second sessions is calculated (though, per #3352, these may be out of order). Up to this point, though, it is allowed that there may be more than two sessions.

I'm not sure whether more than two sessions need to be handled, or exactly what these constraints would mean in that situation. There's the possibility for a quiet bug here, though, which should be prevented.

Issue migrated from trac:3353 at 2022-03-04 09:08:30 +0000

ietf-svn-bot commented 3 years ago

@rjsparks@nostrum.com changed status from new to accepted