From mboxrd@z Thu Jan  1 00:00:00 1970
X-Spam-Checker-Version: SpamAssassin 3.4.4 (2020-01-24) on polar.synack.me
X-Spam-Level: 
X-Spam-Status: No, score=-0.3 required=5.0 tests=BAYES_00,
	REPLYTO_WITHOUT_TO_CC autolearn=no autolearn_force=no version=3.4.4
Path: 
 border2.nntp.dca1.giganews.com!buffer2.nntp.dca1.giganews.com!border2.nntp.dca3.giganews.com!backlog4.nntp.dca3.giganews.com!border2.nntp.dca.giganews.com!nntp.giganews.com!newspeer1.nac.net!feeder.erje.net!eu.feeder.erje.net!zen.net.uk!dedekind.zen.co.uk!aioe.org!.POSTED!not-for-mail
From: "Nasser M. Abbasi" <nma@12000.org>
Newsgroups: comp.lang.ada
Subject: Re: a new language, designed for safety !
Date: Sun, 15 Jun 2014 03:18:29 -0500
Organization: Aioe.org NNTP Server
Message-ID: <lnjksl$9og$1@speranza.aioe.org>
References: <lmj8s6$hhp$1@speranza.aioe.org>
 <1402308235.2520.153.camel@pascal.home.net> <85ioo9yukk.fsf@stephe-leake.org>
 <ln6tlg$1vc$1@dont-email.me>
 <255b51cd-b23f-4413-805a-9fea3c70d8b2@googlegroups.com>
 <J3rmv.287368$Nf2.155042@fx01.iad> <lndulo$2d1$1@dont-email.me>
 <5b446648-8193-46c4-b99c-015d86983758@googlegroups.com>
 <lyppidne4p.fsf@pushface.org> <lnjeof$h63$1@loke.gir.dk>
 <79bae654-d08b-4da6-8dbc-0da5a101ea86@googlegroups.com>
Reply-To: nma@12000.org
NNTP-Posting-Host: +bGw3iKtw0btMD059xlTWg.user.speranza.aioe.org
Mime-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
X-Complaints-To: abuse@aioe.org
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64;
 rv:24.0) Gecko/20100101 Thunderbird/24.6.0
X-Notice: Filtered by postfilter v. 0.8.2
X-Original-Bytes: 1949
Xref: number.nntp.dca.giganews.com comp.lang.ada:186919
Date: 2014-06-15T03:18:29-05:00
List-Id: <comp.lang.ada>

speaking of safe languages, I just saw this trying to update
my viedeplan plugin for firefox:

http://www.videolan.org/security/sa1302.html

"Security Advisory 1302
When parsing a specially crafted ASF movie,
a buffer overflow might occur.

Impact
If successful, a malicious third party could
trigger an invalid memory access"

"This issue is addressed in VLC media player 2.0.x
source code repository by replacing a macro with a
static inline and improved bounds checking."

Notice: "improved bounds checking", WOw! So there
is still a chance the bounds checking might fail?

They should use Ada then!

--Nasser