From owner-freebsd-security@FreeBSD.ORG Fri Apr 25 14:15:31 2014 Return-Path: Delivered-To: freebsd-security@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 225596E5 for ; Fri, 25 Apr 2014 14:15:31 +0000 (UTC) Received: from mail-qc0-x22c.google.com (mail-qc0-x22c.google.com [IPv6:2607:f8b0:400d:c01::22c]) (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id D32181937 for ; Fri, 25 Apr 2014 14:15:30 +0000 (UTC) Received: by mail-qc0-f172.google.com with SMTP id i8so4102623qcq.3 for ; Fri, 25 Apr 2014 07:15:30 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:sender:in-reply-to:references:date:message-id:subject :from:to:cc:content-type:content-transfer-encoding; bh=8+EoBD9205ulXZK49RL1RxYODtnBVImLMKeXnwXNvZE=; b=DJ7H7Ewd3Rhmo2aYV4RAX6UnzxIJGVb+PGpGbe0ZRL5q5truI/2Ktbs3iSFHxsB41S UspcMrtLOOW4ZrbIcyWxG1Uvu+ech1yi5Rp3qroRMY6YtuQfYWTf243fVGP3tq0HhrzE 5hShE1Tr6h84TM6+M2svDEHAB3tdldfT8VJrRGt+Q54nGyJGTHv6IrfLZXtl1q4P7/9w /RcW0XBLosww7XSh1gGnEWB29UsrBl09mmz5ZPiwF+t5nBklp3z1ykZ2ALk0YA1+nRar vN7o7f9hCudo194SXBXpqqfGZyJVk2G85pvi2tmCK1hC0PAxRTqgw9G1pikwpKMyF/qa pXhw== MIME-Version: 1.0 X-Received: by 10.140.92.230 with SMTP id b93mr3588048qge.12.1398435329703; Fri, 25 Apr 2014 07:15:29 -0700 (PDT) Sender: benlaurie@gmail.com Received: by 10.96.162.196 with HTTP; Fri, 25 Apr 2014 07:15:29 -0700 (PDT) In-Reply-To: <86bnvpoav7.fsf@nine.des.no> References: <8783.1398202137@server1.tristatelogic.com> <20140423003400.GA8271@glaze.hydra> <20140423010054.2891E143D098@rock.dv.isc.org> <20140423012206.GB8271@glaze.hydra> <86bnvpoav7.fsf@nine.des.no> Date: Fri, 25 Apr 2014 15:15:29 +0100 X-Google-Sender-Auth: 03cw-YHg_ayZJbtQRhW9zHxr_0U Message-ID: Subject: Re: OpenSSL static analysis, was: De Raadt + FBSD + OpenSSH + hole? From: Ben Laurie To: =?UTF-8?Q?Dag=2DErling_Sm=C3=B8rgrav?= Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Cc: "freebsd-security@freebsd.org security" , "Ronald F. Guilmette" X-BeenThere: freebsd-security@freebsd.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "Security issues \[members-only posting\]" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 25 Apr 2014 14:15:31 -0000 On 25 April 2014 13:24, Dag-Erling Sm=C3=B8rgrav wrote: > Chad Perrin writes: >> Obviously, human judgment is an important part of the process of finding >> and fixing bugs. If it wasn't, the last program we'd ever have to debug >> would be the one that finds and fixes bugs. > > https://en.wikipedia.org/wiki/Halting_problem > > Oh, wait, is this one of those conversations where knowledge and facts > are not welcome? Curious what the halting problem can tell us about finding/fixing bugs?