From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.org!not-for-mail From: Stefan Monnier Newsgroups: gmane.emacs.devel Subject: Re: Rant - Emacs mail is not user friendly Date: Sat, 22 Nov 2014 10:51:08 -0500 Message-ID: References: <871tp4wut1.fsf@uwakimon.sk.tsukuba.ac.jp> <87mw7qvign.fsf@uwakimon.sk.tsukuba.ac.jp> <87bno5ulbu.fsf@uwakimon.sk.tsukuba.ac.jp> <87bnnzu706.fsf@uwakimon.sk.tsukuba.ac.jp> NNTP-Posting-Host: plane.gmane.org Mime-Version: 1.0 Content-Type: text/plain X-Trace: ger.gmane.org 1416671514 14132 80.91.229.3 (22 Nov 2014 15:51:54 GMT) X-Complaints-To: usenet@ger.gmane.org NNTP-Posting-Date: Sat, 22 Nov 2014 15:51:54 +0000 (UTC) Cc: kelly@prtime.org, Richard Stallman , emacs-devel@gnu.org To: "Stephen J. Turnbull" Original-X-From: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Sat Nov 22 16:51:46 2014 Return-path: Envelope-to: ged-emacs-devel@m.gmane.org Original-Received: from lists.gnu.org ([208.118.235.17]) by plane.gmane.org with esmtp (Exim 4.69) (envelope-from ) id 1XsCyQ-00068e-1M for ged-emacs-devel@m.gmane.org; Sat, 22 Nov 2014 16:51:46 +0100 Original-Received: from localhost ([::1]:45834 helo=lists.gnu.org) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1XsCyP-0001BQ-MY for ged-emacs-devel@m.gmane.org; Sat, 22 Nov 2014 10:51:45 -0500 Original-Received: from eggs.gnu.org ([2001:4830:134:3::10]:44201) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1XsCy5-0001BG-3N for emacs-devel@gnu.org; Sat, 22 Nov 2014 10:51:32 -0500 Original-Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1XsCxx-0002kW-KZ for emacs-devel@gnu.org; Sat, 22 Nov 2014 10:51:25 -0500 Original-Received: from chene.dit.umontreal.ca ([132.204.246.20]:44110) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1XsCxp-0002jY-OJ; Sat, 22 Nov 2014 10:51:09 -0500 Original-Received: from pastel.home (lechon.iro.umontreal.ca [132.204.27.242]) by chene.dit.umontreal.ca (8.14.1/8.14.1) with ESMTP id sAMFp8hb032760; Sat, 22 Nov 2014 10:51:08 -0500 Original-Received: by pastel.home (Postfix, from userid 20848) id 5D2A043AC; Sat, 22 Nov 2014 10:51:08 -0500 (EST) In-Reply-To: <87bnnzu706.fsf@uwakimon.sk.tsukuba.ac.jp> (Stephen J. Turnbull's message of "Sat, 22 Nov 2014 14:41:29 +0900") User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/25.0.50 (gnu/linux) X-NAI-Spam-Flag: NO X-NAI-Spam-Threshold: 5 X-NAI-Spam-Score: 0 X-NAI-Spam-Rules: 1 Rules triggered RV5133=0 X-NAI-Spam-Version: 2.3.0.9393 : core <5133> : inlines <1554> : streams <1346819> : uri <1835704> X-detected-operating-system: by eggs.gnu.org: Genre and OS details not recognized. X-Received-From: 132.204.246.20 X-BeenThere: emacs-devel@gnu.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: "Emacs development discussions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Original-Sender: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Xref: news.gmane.org gmane.emacs.devel:178016 Archived-At: >> That's nice, but some security bugs strike even when faced with >> a correct/valid JPG file. What we need to validate is the libjpeg code, >> not the JPG files. > No, you need to validate both. Depends on what you mean by "validate the code". In my line of work, a code is not validated if it can fail on some input. I.e. validation of the code includes checking that the code does the proper validation of the data it receives. Stefan