Menu

#260 Nondeterminism leak in BaseAuditor#coerce/2

Need_for_security
closed-fixed
5
2005-07-24
2005-07-18
No

FIXED
? interface X {}
http://www.eros-os.org/pipermail/e-lang/2004-August/009942.html

# value: X

? 1 :X
# problem: Not audited by
org.erights.e.elang.interp.ProtocolDesc@c03da9
#
# - BaseAuditor#coerce(Object, OneArgFunc)
# . X.coerce(1, null)
# @ coerce/2
# - EExpr#evalToPair(Scope)
# . e`ValueGuard.coerce(X, null).coerce(1,
null)`.evalToPair(<a Scope>)
# @ evalToPair/1:
<jar:file:/Stuff/e/e.jar!/org/erights/e/elang/cmd/
cmdMakerMaker.emaker#:span::104:57::104:66>

Followups

Comment Date By
Fixed this occurrence, but we probably have many other
occurrences of this bug pattern. How can we catch them?

? interface X {}
# value: X

? 1 :X
# problem: Not audited by X
2004-Aug-09 15:35 markm

Discussion

  • Steve Jenson

    Steve Jenson - 2005-07-18
    • status: open --> open-fixed
     
  • Steve Jenson

    Steve Jenson - 2005-07-18
    • status: open-fixed --> closed-fixed
     
  • Mark Samuel Miller

    • assigned_to: nobody --> caplet
     

Log in to post a comment.