[Debconf-devel] Bug#1136114: debconf: validate format and driver names before eval STRING

Colin Watson cjwatson at debian.org
Sun May 10 23:36:14 BST 2026


On Sun, May 10, 2026 at 05:28:17PM -0500, Sebastian EM wrote:
>Thank you again for the detailed guidance.
>
>I took up your suggestion and prepared a revised patch that avoids string
>eval for the dynamic debconf plugin-loading paths instead of only
>validating immediately before the eval.
>
>The patch introduces a small reusable Debconf::Plugin helper.

Thanks for this.  Before I look at the patch in any detail, could you 
please confirm whether there was any LLM involvement in creating it?  It 
was surprisingly quick given the description of how much you did, and 
I'd like to check because I do not want debconf's licensing status made 
ambiguous by the output of an LLM.

(Sorry to have to check, but this is the world we apparently live in 
now.)

Regards,

-- 
Colin Watson (he/him)                              [cjwatson at debian.org]



More information about the Debconf-devel mailing list