From mboxrd@z Thu Jan 1 00:00:00 1970 X-Spam-Checker-Version: SpamAssassin 3.4.4 (2020-01-24) on polar.synack.me X-Spam-Level: X-Spam-Status: No, score=-1.9 required=5.0 tests=BAYES_00 autolearn=unavailable autolearn_force=no version=3.4.4 X-Received: by 10.66.65.109 with SMTP id w13mr2146366pas.21.1384492604434; Thu, 14 Nov 2013 21:16:44 -0800 (PST) X-Received: by 10.50.73.132 with SMTP id l4mr123440igv.0.1384492604260; Thu, 14 Nov 2013 21:16:44 -0800 (PST) Path: eternal-september.org!reader01.eternal-september.org!reader02.eternal-september.org!news.eternal-september.org!news.eternal-september.org!news.eternal-september.org!feeder.eternal-september.org!usenet.blueworldhosting.com!feeder01.blueworldhosting.com!news.ripco.com!rahul.net!wasp.rahul.net!rahul.net!news.kjsl.com!usenet.stanford.edu!y3no8765870pbx.0!news-out.google.com!9ni28627qaf.0!nntp.google.com!o2no1695290qas.0!postnews.google.com!glegroupsg2000goo.googlegroups.com!not-for-mail Newsgroups: comp.lang.ada Date: Thu, 14 Nov 2013 21:16:43 -0800 (PST) In-Reply-To: <7f8741ff-7585-487e-89bd-f941847df21e@googlegroups.com> Complaints-To: groups-abuse@google.com Injection-Info: glegroupsg2000goo.googlegroups.com; posting-host=97.117.192.41; posting-account=x5rpZwoAAABMN2XPwcebPWPkebpwQNJG NNTP-Posting-Host: 97.117.192.41 References: <61b58fde-2542-485a-a5e8-c7041ad822bd@googlegroups.com> <7f8741ff-7585-487e-89bd-f941847df21e@googlegroups.com> User-Agent: G2/1.0 MIME-Version: 1.0 Message-ID: <1a48e0b3-61a6-44d9-b18d-bf4b4aa6d51b@googlegroups.com> Subject: Re: ANN: PLplot plotting library with Ada bindings From: Jerry Injection-Date: Fri, 15 Nov 2013 05:16:44 +0000 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable Xref: news.eternal-september.org comp.lang.ada:17681 Date: 2013-11-14T21:16:43-08:00 List-Id: On Tuesday, November 12, 2013 8:27:37 AM UTC-7, Graham Stark wrote: > Hi Jerry, >=20 > That looks really interesting. >=20 > I'm looking for a plotter routine that could be used safely inside the AW= S web server, so I can implement a 'callback' chart server (currently I hav= e one written in Java).=20 >=20 > Could this be used for that? Some simple tests suggest to me that it isn'= t thread safe. The Initialize_PLplot and associated procedures to set file= names, etc, seem to set global variables somewhere. Is there some trick I'm= missing? >=20 > It does make lovely looking charts. >=20 > thanks very much for this. >=20 > Graham Hi Graham, Here's another comment from a PLplot developer: =3D=3D=3D=3D=3D=3D Andrew =3D=3D=3D=3D=3D=3D I'd concur with what Hez said, however there is one further source of threa= d problems - namely a number of the language bindings use globals to work r= ound passing things like function pointers between languages. This would al= so need checking. This would be a useful, but substantive job. In terms of security we try to follow best practice in terms of checking bu= ffer lengths, avoiding insecure library calls etc to avoid the obvious prob= lems. Newer versions of gcc / gnu ld are getting better at flagging some of= these. There is certainly no systematic attempt to harden plplot or fully = check it for potential security issues.