Yes, thats it. I provide a patch to the best of my knowledge and there is no way to verify that patch until it is part of a release.