I wrote a blog post for the project this week detailing some of the challenges the QEMU project, in common with other FLOSS projects, are seeing with AI generated bug reports. The dilemma being that the LLM’s have got to the point they generate better bug reports than a lot of humans do.
In my limited experience, AI properly guided can be a great bug hunter.
As usual with AI anything must be thoroughly vetted of course, but overall it’s a huge time saver.
If the bugs where being found in code that is used heavily in production I’d agree. Spamming the tracker with 100’s of bugs in random unmaintained areas of the code base just wastes everyone’s time. Perhaps as a project we should be more aggressive in deprecating code but the threat profile for someone running firmware blobs from their camera is very different from people launching untrusted guests on their shared hosting infrastructure.
While I’m with you on the tracker spamming, those random unmaintained areas would need to be addressed one way or another.