Skip to content

Security: ioccc-src/mkiocccentry

SECURITY.md

Security Policy

Reporting an mkiocccentry Vulnerability

NOTICE: If you wish to discuss a possible vulnerability with the mkiocccentry GitHub repo or any of the mkiocccentry tools:

  • chkentry(1)
  • fnamechk(1)
  • iocccsize(1)
  • mkiocccentry(1)
  • txzchk(1)
  • etc.

then please report any possible mkiocccentry vulnerability using the mkiocccentry security advisory interface.

You may also send email to the IOCCC judges by consulting the bottom section of the "How to contact the IOCCC" web page, however the above mentioned advisory interface is preferred.

Reporting an IOCCC Vulnerability

The source code featured on www.ioccc.org is published to create a sense of surprise and wonder. The winning entry code is NOT intended for production use. This source code is often extremely obfuscated, by design, and may be very difficult to analyze for code safety.

Nevertheless, if you wish to discuss a security concern a winning IOCCC entry, then please use the IOCCC winner security advisory interface.

You may also send email to the IOCCC judges by consulting the bottom section of the "How to contact the IOCCC" web page, however the above mentioned advisory interface is preferred.

Supported IOCCC Versions

ALL WINNING IOCCC ENTRY CODE VERSIONS ARE UNSUPPORTED!!

Important Disclaimer

The IOCCC code is intended solely for educational and entertainment purposes only. We strongly advise against installing any winning IOCCC entry code. Utilize IOCCC winning entry code, particularly any found on the IOCCC winner repository and, on the IOCCC website, at your own discretion as well as at your own risk!

The IOCCC and the IOCCC judges DISCLAIM ALL WARRANTIES WITH REGARD TO THIS SOFTWARE, INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THEY BE LIABLE FOR ANY SPECIAL, INDIRECT OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.

There aren't any published security advisories