Re: Sun vs. Microsoft JVMs

From: Roedy Green (look-on_at_mindprod.com.invalid)
Date: 07/30/04 

Date: Fri, 30 Jul 2004 20:23:24 GMT

On Fri, 30 Jul 2004 14:30:05 GMT, Roedy Green
<look-on@mindprod.com.invalid> wrote or quoted :

>>If you are checking the float that the user enters has 2 decimal points
>>(e.g. a currency), then serialise it and send it to the server, which
>>then uses that number, it is not important to check that the number is
>>still only precise to 2 decimal points?

If you did start sending binary floats, you would have to do some sort
of NaN check as well as a bounds check. From a security point of
view, that should pretty well nail it. Exactly how the float was
constructed is immaterial.

If you had an int that only had a set of allowable values, e.g. shoe
sizes, you scrunch this down so that the allowable range is dense,
shoe size index. You can fluff it back up again in the server after
you do you the bounds check. 

-- 
Canadian Mind Products, Roedy Green.
Coaching, problem solving, economical contract programming. 
See http://mindprod.com/jgloss/jgloss.html for The Java Glossary.