Re: Security
- From: Maciej Katafiasz <mathrick@xxxxxxxxx>
- Date: Thu, 31 Jan 2008 14:29:36 +0000 (UTC)
Den Thu, 31 Jan 2008 15:23:33 +0100 skrev Jeronimo Pellegrini:
- Although with (safety 1) you can't really crash the application,
Sure you can: just put some bugs in your code. Forget to convert an
input string into a number somewhere, before doing some maths on it?
Easy, peasy.
Hm, yeash, sounds like fun.
So, not using (safety 0), plus being careful when using (coerce) and
other functions that would bypass type safety.
Coerce doesn't bypass type safety, quite the opposite. The bug here would
be calling an arithmetic function on a string (which results in TYPE-
ERROR), instead on of on a converted value of that string.
Cheers,
Maciej
.
- Follow-Ups:
- Re: Security
- From: Jeronimo Pellegrini
- Re: Security
- References:
- Security
- From: Steve-o
- Re: Security
- From: Jeronimo Pellegrini
- Re: Security
- From: Andrew Reilly
- Re: Security
- From: Jeronimo Pellegrini
- Security
- Prev by Date: Re: Security
- Next by Date: Re: Formatting large numbers with ~g?
- Previous by thread: Re: Security
- Next by thread: Re: Security
- Index(es):
Relevant Pages
|
