From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.org!not-for-mail From: Jan =?UTF-8?Q?Dj=C3=A4rv?= Newsgroups: gmane.emacs.bugs Subject: bug#9196: integer and memory overflow issues (e.g., cut-and-paste crashes Emacs) Date: Sat, 30 Jul 2011 07:52:48 +0200 Message-ID: <4E339C30.9090708@swipnet.se> References: <4E3256E9.3020208@cs.ucla.edu> <4E3284EB.1010308@swipnet.se> <4E32DE0E.5050208@cs.ucla.edu> <4E32E490.3050002@swipnet.se> <4E332009.3090909@cs.ucla.edu> NNTP-Posting-Host: lo.gmane.org Mime-Version: 1.0 Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 7bit X-Trace: dough.gmane.org 1312005242 22647 80.91.229.12 (30 Jul 2011 05:54:02 GMT) X-Complaints-To: usenet@dough.gmane.org NNTP-Posting-Date: Sat, 30 Jul 2011 05:54:02 +0000 (UTC) Cc: 9196@debbugs.gnu.org To: Paul Eggert Original-X-From: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane.org@gnu.org Sat Jul 30 07:53:58 2011 Return-path: Envelope-to: geb-bug-gnu-emacs@m.gmane.org Original-Received: from lists.gnu.org ([140.186.70.17]) by lo.gmane.org with esmtp (Exim 4.69) (envelope-from ) id 1Qn2Uo-00033A-GN for geb-bug-gnu-emacs@m.gmane.org; Sat, 30 Jul 2011 07:53:58 +0200 Original-Received: from localhost ([::1]:44850 helo=lists.gnu.org) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1Qn2Uo-0000pP-2C for geb-bug-gnu-emacs@m.gmane.org; Sat, 30 Jul 2011 01:53:58 -0400 Original-Received: from eggs.gnu.org ([140.186.70.92]:45105) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1Qn2Ul-0000p3-FD for bug-gnu-emacs@gnu.org; Sat, 30 Jul 2011 01:53:56 -0400 Original-Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1Qn2Uk-0005OU-8z for bug-gnu-emacs@gnu.org; Sat, 30 Jul 2011 01:53:55 -0400 Original-Received: from debbugs.gnu.org ([140.186.70.43]:43962) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1Qn2Uk-0005OP-39 for bug-gnu-emacs@gnu.org; Sat, 30 Jul 2011 01:53:54 -0400 Original-Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.69) (envelope-from ) id 1Qn2Us-0005Af-FP; Sat, 30 Jul 2011 01:54:02 -0400 X-Loop: help-debbugs@gnu.org Resent-From: Jan =?UTF-8?Q?Dj=C3=A4rv?= Original-Sender: debbugs-submit-bounces@debbugs.gnu.org Resent-To: owner@debbugs.gnu.org Resent-CC: bug-gnu-emacs@gnu.org Resent-Date: Sat, 30 Jul 2011 05:54:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 9196 X-GNU-PR-Package: emacs X-GNU-PR-Keywords: patch Original-Received: via spool by 9196-submit@debbugs.gnu.org id=B9196.131200518319810 (code B ref 9196); Sat, 30 Jul 2011 05:54:02 +0000 Original-Received: (at 9196) by debbugs.gnu.org; 30 Jul 2011 05:53:03 +0000 Original-Received: from localhost ([127.0.0.1] helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.69) (envelope-from ) id 1Qn2Tv-00059S-CR for submit@debbugs.gnu.org; Sat, 30 Jul 2011 01:53:03 -0400 Original-Received: from smtprelay-h22.telenor.se ([195.54.99.197]) by debbugs.gnu.org with esmtp (Exim 4.69) (envelope-from ) id 1Qn2Ts-000592-9f for 9196@debbugs.gnu.org; Sat, 30 Jul 2011 01:53:01 -0400 Original-Received: from ipb3.telenor.se (ipb3.telenor.se [195.54.127.166]) by smtprelay-h22.telenor.se (Postfix) with ESMTP id 217A2C311 for <9196@debbugs.gnu.org>; Sat, 30 Jul 2011 07:52:49 +0200 (CEST) X-SENDER-IP: [85.225.45.26] X-LISTENER: [smtp.bredband.net] X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: AudwALGbM05V4S0aPGdsb2JhbAA0AQEEASkVIiQBBQwMGgIFIgsCAgkDAgECAQIeDQsbBQIOAQ4BAYRPhEeeXQsBAQEBHhkNJYh8Aq4VkQ2BK4QHgRAEmAKLJjk X-IronPort-AV: E=Sophos;i="4.67,290,1309730400"; d="scan'208";a="32254238" Original-Received: from c-1a2de155.25-1-64736c10.cust.bredbandsbolaget.se (HELO coolsville.localdomain) ([85.225.45.26]) by ipb3.telenor.se with ESMTP; 30 Jul 2011 07:52:49 +0200 Original-Received: from [172.20.199.13] (zeplin [172.20.199.13]) by coolsville.localdomain (Postfix) with ESMTPSA id 16B887FA059; Sat, 30 Jul 2011 07:52:49 +0200 (CEST) User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.7; rv:5.0) Gecko/20110624 Thunderbird/5.0 In-Reply-To: <4E332009.3090909@cs.ucla.edu> X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.11 Precedence: list Resent-Date: Sat, 30 Jul 2011 01:54:02 -0400 X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.6 (newer, 1) X-Received-From: 140.186.70.43 X-BeenThere: bug-gnu-emacs@gnu.org List-Id: "Bug reports for GNU Emacs, the Swiss army knife of text editors" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane.org@gnu.org Original-Sender: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane.org@gnu.org Xref: news.gmane.org gmane.emacs.bugs:49705 Archived-At: Paul Eggert skrev 2011-07-29 23:03: > Also, it's not really true that I won't be the one that has to take > the time. I have been taking the time to maintain and improve these > checks for months now. I've found several serious bugs in the > process, some of which allow remote exploits. I expect to find more > bugs, and I'll be happy to help in any future problems that crop up > in this area. The goal is to have an Emacs implementation that is robust, > rather than one that crashes when given input that was thought > "couldn't happen". I have no problem with checks that fixes bugs. But the checks that check for more than 2 billion command line arguments or more than 2 billion scroll bars or more than 250 million i/o sources simply does not make sense. It is just clutter. Jan D.