From owner-freebsd-hackers  Tue Jan 21  1:15:44 2003
Delivered-To: freebsd-hackers@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id EC15237B401
	for <hackers@freebsd.org>; Tue, 21 Jan 2003 01:15:42 -0800 (PST)
Received: from energyhq.homeip.net (213-97-200-73.uc.nombres.ttd.es [213.97.200.73])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 181DC43ED8
	for <hackers@freebsd.org>; Tue, 21 Jan 2003 01:15:41 -0800 (PST)
	(envelope-from flynn@energyhq.homeip.net)
Received: from christine.energyhq.tk (christine.energyhq.tk [192.168.0.1])
	by energyhq.homeip.net (Postfix) with SMTP
	id CDD63AF5A6; Tue, 21 Jan 2003 10:15:34 +0100 (CET)
Date: Tue, 21 Jan 2003 10:15:02 +0100
From: Miguel Mendez <flynn@energyhq.homeip.net>
To: Kris Kennaway <kris@obsecurity.org>
Cc: hackers@freebsd.org
Subject: Re: RFC: Adding a new (safer) data entry function to libdialog
Message-Id: <20030121101502.049abd8e.flynn@energyhq.homeip.net>
In-Reply-To: <20030121015947.GA7310@rot13.obsecurity.org>
References: <20030120121851.30ff961f.flynn@energyhq.homeip.net>
	<20030121015947.GA7310@rot13.obsecurity.org>
X-Mailer: Sylpheed version 0.8.9 (GTK+ 1.2.10; i386-portbld-freebsd5.0)
X-Face: 
 1j}k*2<FF@J5*`)_?pCn}ydC/PB|6|Y;HZ!6Z!%^'/H*.8V=9YjDc*mn6ypI'16$yA\IP}.
 j3e/`G#5U"1^bwTR6D1H*wPZm}8(ONGrl85Hx!;V^f#`]Xe]35]75HJ%3\J\<j4@V;3kd`C(L_6
 PA_
 sS\5f/c]-:)IF{uj[,!sdoNC?%ne5^:XGp9AG1(?gep3f}#;>E>Y\+C~E|/wehi[:dCM,{N7/uE
 3o#
 P,{t7gA/qnovFDDuyQV.1hdT7&#d)q"xY33}{_GS>kk'S{O]nE$A`T|\4&p\&mQyexOLb8}FO<q
 X<, @*v.fy*'PvzDPQK9iUGzU\
Mime-Version: 1.0
Content-Type: multipart/signed; protocol="application/pgp-signature";
 micalg="pgp-sha1"; boundary="=.FFp0jP1l_YaCs("
Sender: owner-freebsd-hackers@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-hackers.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-hackers>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-hackers>
X-Loop: FreeBSD.ORG

--=.FFp0jP1l_YaCs(
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit

On Mon, 20 Jan 2003 17:59:47 -0800
Kris Kennaway <kris@obsecurity.org> wrote:

>> [making libdialog safer }
> libdialog is rife with overflowable buffers..I'm not sure it would be
> safe even with this input method.

Okay, I have another idea that might be a bit more productive, since the
code in libdialog seems to be nothing but a huge hack. How about
adopting tvision to replace dialog(3)? Libh uses tvision, and I've
thought about writing a small API compat glue (libtdialog.{so,a}) that
would allow legacy libdialog code to be linked with tvision without
modification. The only (big) drawback I see in tvision is that it's in
C++, otherwise is lightyears ahead of what dialog(3) currently offers.

-- 
Cheers,
        Miguel Mendez - flynn@energyhq.homeip.net
        GPG Public Key :: http://energyhq.homeip.net/files/pubkey.txt
        EnergyHQ :: http://www.energyhq.tk
        Of course it runs NetBSD!

--=.FFp0jP1l_YaCs(
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (FreeBSD)

iD8DBQE+LQ+anLctrNyFFPERAoEyAJ4yRiRMFwxaoogx3ngpaQRrhF+POgCfRp2R
Zo2Mxh7wJv6fE4kuZKmuSnY=
=w+bY
-----END PGP SIGNATURE-----

--=.FFp0jP1l_YaCs(--

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-hackers" in the body of the message