From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.org!not-for-mail From: Giorgos Keramidas Newsgroups: gmane.emacs.devel Subject: Re: C file recoginzed as image file Date: Mon, 15 Jan 2007 08:10:07 +0200 Message-ID: <20070115061007.GB2855@kobe.laptop> References: <45A39F63.2010608@ig.com.br> NNTP-Posting-Host: lo.gmane.org Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Trace: sea.gmane.org 1168887242 18786 80.91.229.12 (15 Jan 2007 18:54:02 GMT) X-Complaints-To: usenet@sea.gmane.org NNTP-Posting-Date: Mon, 15 Jan 2007 18:54:02 +0000 (UTC) Cc: Juanma Barranquero , emacs-devel@gnu.org, Stephen Leake Original-X-From: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Mon Jan 15 19:54:00 2007 Return-path: Envelope-to: ged-emacs-devel@m.gmane.org Original-Received: from lists.gnu.org ([199.232.76.165]) by lo.gmane.org with esmtp (Exim 4.50) id 1H6Vdb-00047Y-2e for ged-emacs-devel@m.gmane.org; Mon, 15 Jan 2007 18:28:51 +0100 Original-Received: from localhost ([127.0.0.1] helo=lists.gnu.org) by lists.gnu.org with esmtp (Exim 4.43) id 1H6Nw3-0004t7-44 for ged-emacs-devel@m.gmane.org; Mon, 15 Jan 2007 04:15:23 -0500 Original-Received: from mailman by lists.gnu.org with tmda-scanned (Exim 4.43) id 1H6Ntw-0003yu-BM for emacs-devel@gnu.org; Mon, 15 Jan 2007 04:13:12 -0500 Original-Received: from exim by lists.gnu.org with spam-scanned (Exim 4.43) id 1H6Ntu-0003y2-23 for emacs-devel@gnu.org; Mon, 15 Jan 2007 04:13:11 -0500 Original-Received: from [199.232.76.173] (helo=monty-python.gnu.org) by lists.gnu.org with esmtp (Exim 4.43) id 1H6Ntt-0003xr-TO for emacs-devel@gnu.org; Mon, 15 Jan 2007 04:13:09 -0500 Original-Received: from [62.1.205.36] (helo=igloo.linux.gr) by monty-python.gnu.org with esmtps (TLS-1.0:DHE_RSA_AES_256_CBC_SHA:32) (Exim 4.52) id 1H6Nts-0007NI-MO for emacs-devel@gnu.org; Mon, 15 Jan 2007 04:13:09 -0500 Original-Received: from kobe.laptop (host5.bedc.ondsl.gr [62.103.39.229]) (authenticated bits=128) by igloo.linux.gr (8.13.8/8.13.8/Debian-3) with ESMTP id l0F9BufQ027213 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NOT); Mon, 15 Jan 2007 11:12:02 +0200 Original-Received: from kobe.laptop (kobe.laptop [127.0.0.1]) by kobe.laptop (8.13.8/8.13.8) with ESMTP id l0F9BW2K001599; Mon, 15 Jan 2007 11:11:50 +0200 (EET) (envelope-from keramida@ceid.upatras.gr) Original-Received: (from keramida@localhost) by kobe.laptop (8.13.8/8.13.8/Submit) id l0F6A8lx002961; Mon, 15 Jan 2007 08:10:08 +0200 (EET) (envelope-from keramida@ceid.upatras.gr) Original-To: Vinicius Jose Latorre Content-Disposition: inline In-Reply-To: <45A39F63.2010608@ig.com.br> X-Hellug-MailScanner: Found to be clean X-Hellug-MailScanner-SpamCheck: not spam, SpamAssassin (not cached, score=-3.477, required 5, autolearn=not spam, ALL_TRUSTED -1.80, AWL 0.72, BAYES_00 -2.60, DNS_FROM_RFC_ABUSE 0.20) X-Hellug-MailScanner-From: keramida@ceid.upatras.gr X-BeenThere: emacs-devel@gnu.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Emacs development discussions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Original-Sender: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Errors-To: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Xref: news.gmane.org gmane.emacs.devel:65214 Archived-At: On 2007-01-09 11:57, Vinicius Jose Latorre wrote: > Could a valid image file (GIF, JPG, PNG, etc.) with a valid file > extension contain a virus? Depending on what you mean by `a valid image', yes. It is conceivable that someone with knowledge about the exact format *and* a bug in one of the image libraries can construct a valid image file which takes advantage of a bug in the image processing libraries; typically a lack of range or size checks, which can cause buffer overflows or other similar problems in languages that allow this to happen.