chicken-hackers
[Top][All Lists]
Advanced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [Chicken-hackers] Made a start with CHICKEN 5 proposal


From: Peter Bex
Subject: Re: [Chicken-hackers] Made a start with CHICKEN 5 proposal
Date: Fri, 29 Aug 2014 21:01:06 +0200
User-agent: Mutt/1.4.2.3i

On Fri, Aug 29, 2014 at 10:50:31PM +0400, Oleg Kolosov wrote:
> On 08/23/14 19:35, Peter Bex wrote:
> > I've made a start on the wiki, at what we'd like CHICKEN 5 to be about.
> 
> I've remembered one more thing: why not stick the terminating '\0' at
> the end of all strings in internal representation? This looks pretty
> harmless but could make some common FFI uses a breeze.

We should only do that when the \0 is rejected up front inside strings.
Right now, \0 is allowed in a string and if you pass it to a C function,
it is detected and an exception is raised.  Doing it with the current
system wouldn't buy us anything, and would just make potential misuse
more attractive, because a user would be tempted to just pass the
string's internal buffer directly to the C API "for performance".
This would then open up a can of worms containing plenty of potential
vulnerabilities.

Cheers,
Peter
-- 
http://www.more-magic.net



reply via email to

[Prev in Thread] Current Thread [Next in Thread]