Re: Security



On 2008-01-31, Andrew Reilly <andrew-newspost@xxxxxxxxxxxxxxxxxxxxx> wrote:
On Thu, 31 Jan 2008 10:43:41 +0100, Jeronimo Pellegrini wrote:

- Although with (safety 1) you can't really crash the application,

Sure you can: just put some bugs in your code. Forget to convert an
input string into a number somewhere, before doing some maths on it?
Easy, peasy.

Hm, yeash, sounds like fun.
So, not using (safety 0), plus being careful when using (coerce) and
other functions that would bypass type safety.

I think doing lots of automated testing helps too (with well-thought
tests).

J.
.



Relevant Pages

  • Re: Security
    ... input string into a number somewhere, before doing some maths on it? ... Coerce doesn't bypass type safety, ...
    (comp.lang.lisp)
  • Re: Security
    ... just put some bugs in your code. ... input string into a number somewhere, before doing some maths on it? ... waiting for events from the user. ...
    (comp.lang.lisp)
  • Re: Security
    ... just put some bugs in your code. ... input string into a number somewhere, before doing some maths on it? ... Easy, peasy. ...
    (comp.lang.lisp)