unofficial mirror of emacs-devel@gnu.org 
 help / color / mirror / code / Atom feed
From: Stefan Monnier <monnier@iro.umontreal.ca>
To: "Marshall\, Simon" <Simon.Marshall@misys.com>
Cc: Chong Yidong <cyd@stupidchicken.com>,
	mwelinder@gmail.com, emacs-devel@gnu.org,
	Eli Zaretskii <eliz@gnu.org>, Simon Marshall <simon@gnu.org>
Subject: Re: [mwelinder@gmail.com: Emacs security bug]
Date: Mon, 12 May 2008 10:31:16 -0400	[thread overview]
Message-ID: <jwvskwnoat0.fsf-monnier+emacs@gnu.org> (raw)
In-Reply-To: <6EE216E1AA959543A555C60FF34FB7670418B0A2@maileube01.misys.global.ad> (Simon Marshall's message of "Mon, 12 May 2008 11:10:50 +0100")

> OK, it seems fast-lock writes a single (fast-lock-cache-data ...) form
> into the .flc file, and fast-lock loads the .flc file.  Is there a way
> to restrict the forms evaluated during a load, rather than parsing the
> .flc file?  Or a better way?

I see no point in investing any significant time to try and fix
this problem.

> Probably the most reasonable fix, in the circumstances, is to make
> fast-lock-cache-directories a risky local variable and remove "." from
> its default value?

Sounds OK.


        Stefan




  reply	other threads:[~2008-05-12 14:31 UTC|newest]

Thread overview: 18+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2008-05-09 21:44 [mwelinder@gmail.com: Emacs security bug] Eli Zaretskii
2008-05-09 23:19 ` Chong Yidong
2008-05-10  7:40   ` Eli Zaretskii
2008-05-10  8:28     ` Christian Faulhammer
2008-05-10 14:50 ` Chong Yidong
2008-05-10 15:16   ` Eli Zaretskii
2008-05-12 10:10   ` Marshall, Simon
2008-05-12 14:31     ` Stefan Monnier [this message]
2008-05-12 16:37       ` Marshall, Simon
2008-05-12 17:30         ` Stefan Monnier
2008-05-12 20:14         ` Ulrich Mueller
2008-05-12 20:37           ` Ulrich Mueller
2008-05-13  9:00             ` Marshall, Simon
2008-05-14 14:41               ` Ulrich Mueller
2008-05-14 14:52                 ` Marshall, Simon
2008-05-12 20:45           ` Stefan Monnier
2008-05-12 14:36     ` Florian Weimer
2008-05-12 16:21       ` Marshall, Simon

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

  List information: https://www.gnu.org/software/emacs/

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=jwvskwnoat0.fsf-monnier+emacs@gnu.org \
    --to=monnier@iro.umontreal.ca \
    --cc=Simon.Marshall@misys.com \
    --cc=cyd@stupidchicken.com \
    --cc=eliz@gnu.org \
    --cc=emacs-devel@gnu.org \
    --cc=mwelinder@gmail.com \
    --cc=simon@gnu.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
Code repositories for project(s) associated with this public inbox

	https://git.savannah.gnu.org/cgit/emacs.git

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for read-only IMAP folder(s) and NNTP newsgroup(s).