|
From: | Bob Friesenhahn |
Subject: | Re: ltdl .la file parsing (was: Coverage for libltdl/slist.c and fallout) |
Date: | Tue, 8 Dec 2009 21:49:07 -0600 (CST) |
User-agent: | Alpine 2.01 (GSO 1266 2009-07-14) |
On Tue, 8 Dec 2009, Ralf Wildenhues wrote:
interfaces. For example, it is already known that the .la file parser is fragile and trivial edits to an .la file will cause the using program to core-dump. The .la file parsing is an external interface so it should get more priority.Good idea. Proposed patch. What other things do you know about that are mishandled? OK to commit?
The fix and the tests look quite good and useful to me. I don't currently know of other parsing issues.
As long as the application can trust that libltdl will search for .la files in secure locations, then there should not be great concern about corrupted .la files.
Bob -- Bob Friesenhahn address@hidden, http://www.simplesystems.org/users/bfriesen/ GraphicsMagick Maintainer, http://www.GraphicsMagick.org/
[Prev in Thread] | Current Thread | [Next in Thread] |