xref: /aosp_15_r20/external/lz4/SECURITY.md (revision 27162e4e17433d5aa7cb38e7b6a433a09405fc7f)
1*27162e4eSAndroid Build Coastguard Worker# Security Policy
2*27162e4eSAndroid Build Coastguard Worker
3*27162e4eSAndroid Build Coastguard WorkerIf you have discovered a security vulnerability in this project, please report it
4*27162e4eSAndroid Build Coastguard Workerprivately. **Do not disclose it as a public issue.** This gives me time to work with you
5*27162e4eSAndroid Build Coastguard Workerto fix the issue before public exposure, reducing the chance that the exploit will be
6*27162e4eSAndroid Build Coastguard Workerused before a patch is released.
7*27162e4eSAndroid Build Coastguard Worker
8*27162e4eSAndroid Build Coastguard WorkerPlease submit the report by filling out
9*27162e4eSAndroid Build Coastguard Worker[this form](https://github.com/lz4/lz4/security/advisories/new).
10*27162e4eSAndroid Build Coastguard Worker
11*27162e4eSAndroid Build Coastguard WorkerPlease provide the following information in your report:
12*27162e4eSAndroid Build Coastguard Worker
13*27162e4eSAndroid Build Coastguard Worker- A description of the vulnerability and its impact
14*27162e4eSAndroid Build Coastguard Worker- How to reproduce the issue
15*27162e4eSAndroid Build Coastguard Worker
16*27162e4eSAndroid Build Coastguard WorkerThis project is maintained by a single maintainer on a reasonable-effort basis. As such,
17*27162e4eSAndroid Build Coastguard WorkerI ask that you give me 90 days to work on a fix before public exposure.
18