From mboxrd@z Thu Jan 1 00:00:00 1970 X-Spam-Checker-Version: SpamAssassin 3.4.4 (2020-01-24) on polar.synack.me X-Spam-Level: X-Spam-Status: No, score=-1.9 required=5.0 tests=BAYES_00,FREEMAIL_FROM autolearn=unavailable autolearn_force=no version=3.4.4 X-Received: by 10.140.140.147 with SMTP id 141mr5332910qhm.29.1460547795844; Wed, 13 Apr 2016 04:43:15 -0700 (PDT) X-Received: by 10.157.35.195 with SMTP id t61mr96330otb.16.1460547795630; Wed, 13 Apr 2016 04:43:15 -0700 (PDT) Path: eternal-september.org!reader01.eternal-september.org!reader02.eternal-september.org!news.eternal-september.org!mx02.eternal-september.org!feeder.eternal-september.org!news.glorb.com!7no2388570qgj.0!news-out.google.com!j7ni0igm.0!nntp.google.com!g8no10700igr.0!postnews.google.com!glegroupsg2000goo.googlegroups.com!not-for-mail Newsgroups: comp.lang.ada Date: Wed, 13 Apr 2016 04:43:15 -0700 (PDT) In-Reply-To: Complaints-To: groups-abuse@google.com Injection-Info: glegroupsg2000goo.googlegroups.com; posting-host=85.166.230.161; posting-account=bPTmZAoAAAC_6HP9XLKB9aAAxBa6BuOR NNTP-Posting-Host: 85.166.230.161 References: <2055a188-fb5f-496a-ab37-b25d81cebe1b@googlegroups.com> <5271bc70-bfea-4e2f-b4e3-6c847843f5b4@googlegroups.com> User-Agent: G2/1.0 MIME-Version: 1.0 Message-ID: <9c28eac4-8edf-45dc-afcd-082abfd4cf4b@googlegroups.com> Subject: Re: Substrings as argument to procedures/functions From: reinkor Injection-Date: Wed, 13 Apr 2016 11:43:15 +0000 Content-Type: text/plain; charset=ISO-8859-1 Xref: news.eternal-september.org comp.lang.ada:30093 Date: 2016-04-13T04:43:15-07:00 List-Id: On Wednesday, April 13, 2016 at 12:19:28 PM UTC+2, Brian Drummond wrote: > On Tue, 12 Apr 2016 21:44:01 -0700, reinkor wrote: > > > Yes, I may somehow have confused index and position. > > However, there may be some security/paranoia reasons to minimize the > > information handed over to a subroutine? > > Rather the reverse. > > It's the absence of such information - and its consequences - that makes > buffer overflow attacks possible. > > -- Brian I have no strong opinion, but just trying arguments: If a complex subroutine is made by a subcontract (in the country far far away), then it is in general a point to provide only the necessary information to make the subroutine? I mean, if paranoia is in charge ? :-)