From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.org!.POSTED!not-for-mail From: Narendra Joshi Newsgroups: gmane.emacs.help Subject: Re: CVE-2017-14482 - Red Hat Customer Portal Date: Wed, 27 Sep 2017 00:27:56 +0530 Message-ID: <87zi9hcmob.fsf@gmail.com> References: <2e991bb7-c570-49ce-be94-3654945bb4b5@mousecar.com> <87d16jxjz6.fsf@eps142.cdf.udc.es> <861smzcgx3.fsf@zoho.com> <1b3bec6e-d4d5-37a7-ba54-49bd2d8281bd@yandex.com> <86k20qbcu9.fsf@zoho.com> <86o9q0a8zc.fsf@zoho.com> <87vak8rwcx.fsf@qcore> <20170924145401.GA14514@tuxteam.de> NNTP-Posting-Host: blaine.gmane.org Mime-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable X-Trace: blaine.gmane.org 1506452196 22133 195.159.176.226 (26 Sep 2017 18:56:36 GMT) X-Complaints-To: usenet@blaine.gmane.org NNTP-Posting-Date: Tue, 26 Sep 2017 18:56:36 +0000 (UTC) User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/27.0.50 (gnu/linux) Cc: help-gnu-emacs@gnu.org To: Original-X-From: help-gnu-emacs-bounces+geh-help-gnu-emacs=m.gmane.org@gnu.org Tue Sep 26 20:56:32 2017 Return-path: Envelope-to: geh-help-gnu-emacs@m.gmane.org Original-Received: from lists.gnu.org ([208.118.235.17]) by blaine.gmane.org with esmtp (Exim 4.84_2) (envelope-from ) id 1dwv1y-0005NA-Qx for geh-help-gnu-emacs@m.gmane.org; Tue, 26 Sep 2017 20:56:30 +0200 Original-Received: from localhost ([::1]:50769 helo=lists.gnu.org) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1dwv26-00080T-4C for geh-help-gnu-emacs@m.gmane.org; Tue, 26 Sep 2017 14:56:38 -0400 Original-Received: from eggs.gnu.org ([2001:4830:134:3::10]:53615) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1dwv1c-00080G-KW for help-gnu-emacs@gnu.org; Tue, 26 Sep 2017 14:56:09 -0400 Original-Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1dwv1W-0006B4-O7 for help-gnu-emacs@gnu.org; Tue, 26 Sep 2017 14:56:08 -0400 Original-Received: from mail-pg0-x234.google.com ([2607:f8b0:400e:c05::234]:53132) by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_128_CBC_SHA1:16) (Exim 4.71) (envelope-from ) id 1dwv1W-00069e-Ic for help-gnu-emacs@gnu.org; Tue, 26 Sep 2017 14:56:02 -0400 Original-Received: by mail-pg0-x234.google.com with SMTP id i195so6407661pgd.9 for ; Tue, 26 Sep 2017 11:56:02 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=from:to:cc:subject:references:date:in-reply-to:message-id :user-agent:mime-version:content-transfer-encoding; bh=/9q6R33xDUPcO2Qzl6oNmC+/pmv1nmQkfGdGtMEaj08=; b=EtzXClW4ZgwywLDz/I189dJ9AX7jFEOiAfiIf6ZHiiw9ROOmUGnj+/zwrESAvbJ+7V sIepbjchHzx8OSFK9AMvqwIiA0E9/EW1OW+aBPsgtfGXnI7qv9C7D+uu9ttw/0Env43t Or/FONpdDSBYY+gCJlfSDRnfWOlQJz1g+5yvak5GO1DALKiu1DFL+S/wn4B8qYaO5zkA OGe3qSvdl9f5JY8//VlvGrR7nSkkDW3+Dl9DguiOqLOzjHBTFKz7tTnHk7f6NZCrTfSs TF9ileFCU6Qyt7/Cp2hTeGGWX8Z8WdHP3BqpuVeoOjcQB6poodVSGJaM0M5AeNpHpNnb Cmpg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:to:cc:subject:references:date:in-reply-to :message-id:user-agent:mime-version:content-transfer-encoding; bh=/9q6R33xDUPcO2Qzl6oNmC+/pmv1nmQkfGdGtMEaj08=; b=W7RTxFhZrSR5+741NflyyTiUYv8VUleRKizoMy8mcaH5aB5itWKaZEHDbkG92bh8U0 VeVHR5qps9bIkGinJrf+dZeGroyYdbBc7Og1npikVykv83keimxYiUcM0Hu4INMul1o9 qxJM2kYrK5ILruEPybDLBlkkCu4FFliMor60ebyRQEogsFD9KmE2i3YJKkR3/pGn0Ggx ZVv/oyLGMvS6ZxDvmQ0wlj3p5zOQ27se35BeJlxRkxwAf9B+ouMjNZmPwvPM1PccCwKU LcooaxewF3N0J1+XGJLZTlJm42JUPb97eYtdVbjjmJWoUtCymfMDISioqJ1yVkt2Qe03 w+fA== X-Gm-Message-State: AHPjjUi7uEDb8uy1KG8nRC5/VWU7VCkM+Ip9Vm2XtukKLGe01nhot0l1 TcS+icEhQWETy2/39kqJq4K6+zE= X-Google-Smtp-Source: AOwi7QAzcL0q6xMgzGu5l9DzIvftx/qsu3AvbDcS01J58jcc7kdE96TF+uSVps+eClueXHo/JXzfqg== X-Received: by 10.159.198.72 with SMTP id y8mr11750154plt.410.1506452161243; Tue, 26 Sep 2017 11:56:01 -0700 (PDT) Original-Received: from vicarie ([1.23.210.133]) by smtp.gmail.com with ESMTPSA id n2sm16911626pfa.118.2017.09.26.11.55.59 (version=TLS1_2 cipher=ECDHE-RSA-CHACHA20-POLY1305 bits=256/256); Tue, 26 Sep 2017 11:56:00 -0700 (PDT) In-Reply-To: <20170924145401.GA14514@tuxteam.de> (tomas's message of "Sun, 24 Sep 2017 16:54:01 +0200") X-detected-operating-system: by eggs.gnu.org: Genre and OS details not recognized. X-Received-From: 2607:f8b0:400e:c05::234 X-BeenThere: help-gnu-emacs@gnu.org X-Mailman-Version: 2.1.21 Precedence: list List-Id: Users list for the GNU Emacs text editor List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: help-gnu-emacs-bounces+geh-help-gnu-emacs=m.gmane.org@gnu.org Original-Sender: "help-gnu-emacs" Xref: news.gmane.org gmane.emacs.help:114429 Archived-At: writes: > On Sun, Sep 24, 2017 at 04:42:54PM +0200, =C3=93scar Fuentes wrote: > > [...] > >> It seems that you think that formal verification says that the software >> is correct. That's in theory. Practice is different, as usual. > > And to embellish this discussion with an Argument by Authority: > > "Beware of bugs in the above code; I have only proved it > correct, not tried it." > > http://www-cs-faculty.stanford.edu/~knuth/faq.html And I would like to add this to the farrago presented in this thread:=20 http://wiki.c2.com/?LetItCrash You talk about formal verification (always?) but for some use cases, it's okay to start with "Let it crash!". People have done it (successfully). =20=20=20=20=20=20 --=20 Narendra Joshi