From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.org!not-for-mail From: Davis Herring Newsgroups: gmane.emacs.devel Subject: Re: DSO-style FFI Date: Wed, 09 Oct 2013 17:52:36 -0600 Organization: XCP-1 Message-ID: <5255EC44.4070203@lanl.gov> References: <877gdqrc9u.fsf@flea.lifelogs.com> <87mwmmp05f.fsf@flea.lifelogs.com> <87fvsdpato.fsf@flea.lifelogs.com> <8738oc20xk.fsf@flea.lifelogs.com> <87d2ngzlyl.fsf_-_@flea.lifelogs.com> <87siwcxda7.fsf@flea.lifelogs.com> <87zjqjfz36.fsf@fleche.redhat.com> <87wqlnv9bn.fsf@flea.lifelogs.com> <52546F55.1020707@lanl.gov> <87bo2yt70v.fsf@flea.lifelogs.com> NNTP-Posting-Host: plane.gmane.org Mime-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit X-Trace: ger.gmane.org 1381362778 7710 80.91.229.3 (9 Oct 2013 23:52:58 GMT) X-Complaints-To: usenet@ger.gmane.org NNTP-Posting-Date: Wed, 9 Oct 2013 23:52:58 +0000 (UTC) To: emacs-devel@gnu.org Original-X-From: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Thu Oct 10 01:53:01 2013 Return-path: Envelope-to: ged-emacs-devel@m.gmane.org Original-Received: from lists.gnu.org ([208.118.235.17]) by plane.gmane.org with esmtp (Exim 4.69) (envelope-from ) id 1VU3Yr-0002yx-Nm for ged-emacs-devel@m.gmane.org; Thu, 10 Oct 2013 01:53:01 +0200 Original-Received: from localhost ([::1]:44322 helo=lists.gnu.org) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1VU3Yr-00035w-Di for ged-emacs-devel@m.gmane.org; Wed, 09 Oct 2013 19:53:01 -0400 Original-Received: from eggs.gnu.org ([2001:4830:134:3::10]:33595) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1VU3Yh-000346-4U for emacs-devel@gnu.org; Wed, 09 Oct 2013 19:52:59 -0400 Original-Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1VU3YY-0002Cp-TK for emacs-devel@gnu.org; Wed, 09 Oct 2013 19:52:50 -0400 Original-Received: from proofpoint4.lanl.gov ([204.121.3.52]:37289) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1VU3YY-0002CU-Ln for emacs-devel@gnu.org; Wed, 09 Oct 2013 19:52:42 -0400 Original-Received: from mailrelay1.lanl.gov (mailrelay1.lanl.gov [128.165.4.101]) by mailgate4.lanl.gov (8.14.5/8.14.5) with ESMTP id r99Nqakp031544 for ; Wed, 9 Oct 2013 17:52:38 -0600 Original-Received: from localhost (localhost.localdomain [127.0.0.1]) by mailrelay1.lanl.gov (Postfix) with ESMTP id 96EFE2765DF for ; Wed, 9 Oct 2013 17:52:36 -0600 (MDT) X-NIE-2-Virus-Scanner: amavisd-new at mailrelay1.lanl.gov Original-Received: from [128.165.123.183] (xray-r06.lanl.gov [128.165.123.183]) by mailrelay1.lanl.gov (Postfix) with ESMTP id 881F82765D7 for ; Wed, 9 Oct 2013 17:52:36 -0600 (MDT) User-Agent: Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.9.2.18) Gecko/20110717 Lanikai/3.1.11 In-Reply-To: <87bo2yt70v.fsf@flea.lifelogs.com> X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10432:5.10.8794, 1.0.431, 0.0.0000 definitions=2013-10-09_08:2013-10-09, 2013-10-09, 1970-01-01 signatures=0 X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.4.x X-Received-From: 204.121.3.52 X-BeenThere: emacs-devel@gnu.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: "Emacs development discussions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Original-Sender: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Xref: news.gmane.org gmane.emacs.devel:164051 Archived-At: > That's pretty dangerous, isn't it? Any memory corruption, intentional > or not, could affect the user significantly. Is that an acceptable risk? Intentional memory corruption is entirely beside the point -- you're already planning to run whatever code the DSO provides with your current security credentials. (You even already run DSO-specified code as soon as you call dlopen().) As for accidental corruption, you can at least protect your Lisp_Objects by controlling how you copy data into and out of them. (Of course, a wild pointer can corrupt absolutely anything, but you're not very likely to be in an undesirable "Emacs appears functional but is confused" state.) Davis -- This product is sold by volume, not by mass. If it appears too dense or too sparse, it is because mass-energy conversion has occurred during shipping.