<html>
<head>
<base href="https://wiki.asterisk.org/wiki">
<link rel="stylesheet" href="/wiki/s/en/2176/25/9/_/styles/combined.css?spaceKey=AST&forWysiwyg=true" type="text/css">
</head>
<body style="background: white;" bgcolor="white" class="email-body">
<div id="pageContent">
<div id="notificationFormat">
<div class="wiki-content">
<div class="email">
<h2><a href="https://wiki.asterisk.org/wiki/display/AST/Asterisk+Bug+Bounties">Asterisk Bug Bounties</a></h2>
<h4>Page <b>edited</b> by <a href="https://wiki.asterisk.org/wiki/display/~dduffett@digium.com">David Duffett</a>
</h4>
<br/>
<h4>Changes (1)</h4>
<div id="page-diffs">
<table class="diff" cellpadding="0" cellspacing="0">
<tr><td class="diff-snipped" >...<br></td></tr>
<tr><td class="diff-unchanged" >The lower limit of $500 is to discourage pointless offers. "I'll offer $20 for 50 hours of work on this super complex bug\!" <br> <br></td></tr>
<tr><td class="diff-changed-lines" >It would be helpful if those posting a bounty add <span class="diff-changed-words">"[<span class="diff-added-chars"style="background-color: #dfd;">[</span>BOUNTY]<span class="diff-added-chars"style="background-color: #dfd;">]</span>"</span> to the subject line of the post, thus allowing subscribers to the list to filter. <br></td></tr>
<tr><td class="diff-unchanged" > <br>h3. What is a bug bounty? <br></td></tr>
<tr><td class="diff-snipped" >...<br></td></tr>
</table>
</div> <h4>Full Content</h4>
<div class="notificationGreySide">
<h2><a name="AsteriskBugBounties-Iwanttoofferabountyforaparticularbug%5C%21WherecanIdothat%3F"></a>I want to offer a bounty for a particular bug! Where can I do that?</h2>
<p>Bug bounties for Asterisk may be posted on the Asterisk Development mailing list at <a href="http://lists.digium.com/mailman/listinfo/asterisk-dev" class="external-link" rel="nofollow">http://lists.digium.com/mailman/listinfo/asterisk-dev</a></p>
<p><b>Minimum offer:</b> $500</p>
<p>Bounty offers may be made for both new features and bug fixes.</p>
<p>The lower limit of $500 is to discourage pointless offers. "I'll offer $20 for 50 hours of work on this super complex bug!"</p>
<p>It would be helpful if those posting a bounty add "[<a href="/wiki/pages/createpage.action?spaceKey=AST&title=BOUNTY&linkCreation=true&fromPageId=22087953" class="createlink">BOUNTY</a>]" to the subject line of the post, thus allowing subscribers to the list to filter.</p>
<h3><a name="AsteriskBugBounties-Whatisabugbounty%3F"></a>What is a bug bounty?</h3>
<p>It is the case that some corporate users of Asterisk will pay you hard cash for your work on developing patches and bug fixes. Often, there are reasons that a firm can't or won't fix/patch Asterisk internally, and wants to outsource that work to the larger Asterisk community. The Asterisk community wins whenever a bounty bug is resolved because everyone benefits from that work. The company sponsoring the bounty wins, because their specific problem is fixed. And, of course, the programmer wins because they're paid.</p>
<div class='panelMacro'><table class='warningMacro'><colgroup><col width='24'><col></colgroup><tr><td valign='top'><img src="/wiki/images/icons/emoticons/forbidden.gif" width="16" height="16" align="absmiddle" alt="" border="0"></td><td>Bounty arrangements are made between the sponsor and the programmer, and are NOT via Digium or any other third-party middleman. Payment terms, guarantees, etc. etc. are the problem of the two parties (programmer and bounty sponsor) and the bugtracker simply permits an open forum for discussion of the problems and for the bounty.</td></tr></table></div>
<h3><a name="AsteriskBugBounties-Butwhatabout...%3F"></a>But what about ... ?</h3>
<p>If the author has signed a contributor license agreement, and the patch is in the bugtracker, it's considered fair game to be included in the version of Asterisk that Digium maintains. These patches follow the same licensing rules as everything else for Asterisk that is submitted to the bugtracker:</p>
<p> If there are multiple resolutions to a bounty, it is the sponsor's sole discretion to award the payment or not. All bug reports that are bounty oriented will be public and GPL, and we will actively discourage/delete non-GPL arrangements that are based on bug reports in the open-community bugtracker (i.e.: you will incur the wrath of the bug marshal posse.)</p>
<p>This was discussed on the dev list in Jan 2013: <a href="http://lists.digium.com/pipermail/asterisk-dev/2013-January/058351.html" class="external-link" rel="nofollow">http://lists.digium.com/pipermail/asterisk-dev/2013-January/058351.html</a></p>
</div>
<div id="commentsSection" class="wiki-content pageSection">
<div style="float: right;" class="grey">
<a href="https://wiki.asterisk.org/wiki/users/removespacenotification.action?spaceKey=AST">Stop watching space</a>
<span style="padding: 0px 5px;">|</span>
<a href="https://wiki.asterisk.org/wiki/users/editmyemailsettings.action">Change email notification preferences</a>
</div>
<a href="https://wiki.asterisk.org/wiki/display/AST/Asterisk+Bug+Bounties">View Online</a>
|
<a href="https://wiki.asterisk.org/wiki/pages/diffpagesbyversion.action?pageId=22087953&revisedVersion=7&originalVersion=6">View Changes</a>
|
<a href="https://wiki.asterisk.org/wiki/display/AST/Asterisk+Bug+Bounties?showComments=true&showCommentArea=true#addcomment">Add Comment</a>
</div>
</div>
</div>
</div>
</div>
</body>
</html>