From owner-freebsd-security@FreeBSD.ORG Fri Apr 25 12:24:33 2014 Return-Path: Delivered-To: freebsd-security@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 44C737DA for ; Fri, 25 Apr 2014 12:24:33 +0000 (UTC) Received: from smtp.des.no (smtp.des.no [194.63.250.102]) by mx1.freebsd.org (Postfix) with ESMTP id 03BFB1BD1 for ; Fri, 25 Apr 2014 12:24:32 +0000 (UTC) Received: from nine.des.no (smtp.des.no [194.63.250.102]) by smtp-int.des.no (Postfix) with ESMTP id 5335D6B43; Fri, 25 Apr 2014 12:24:26 +0000 (UTC) Received: by nine.des.no (Postfix, from userid 1001) id 5A01930FDF; Fri, 25 Apr 2014 14:24:28 +0200 (CEST) From: =?utf-8?Q?Dag-Erling_Sm=C3=B8rgrav?= To: "Ronald F. Guilmette" Subject: Re: OpenSSL static analysis, was: De Raadt + FBSD + OpenSSH + hole? References: <8783.1398202137@server1.tristatelogic.com> <20140423003400.GA8271@glaze.hydra> <20140423010054.2891E143D098@rock.dv.isc.org> <20140423012206.GB8271@glaze.hydra> Date: Fri, 25 Apr 2014 14:24:28 +0200 In-Reply-To: <20140423012206.GB8271@glaze.hydra> (Chad Perrin's message of "Tue, 22 Apr 2014 19:22:06 -0600") Message-ID: <86bnvpoav7.fsf@nine.des.no> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/24.3 (berkeley-unix) MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Cc: freebsd-security@freebsd.org X-BeenThere: freebsd-security@freebsd.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "Security issues \[members-only posting\]" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 25 Apr 2014 12:24:33 -0000 Chad Perrin writes: > Obviously, human judgment is an important part of the process of finding > and fixing bugs. If it wasn't, the last program we'd ever have to debug > would be the one that finds and fixes bugs. https://en.wikipedia.org/wiki/Halting_problem Oh, wait, is this one of those conversations where knowledge and facts are not welcome? DES --=20 Dag-Erling Sm=C3=B8rgrav - des@des.no