From mboxrd@z Thu Jan 1 00:00:00 1970 X-Spam-Checker-Version: SpamAssassin 3.4.4 (2020-01-24) on polar.synack.me X-Spam-Level: X-Spam-Status: No, score=-1.1 required=5.0 tests=BAYES_00, PP_MIME_FAKE_ASCII_TEXT autolearn=no autolearn_force=no version=3.4.4 X-Google-Language: ENGLISH,ASCII X-Google-Thread: 107f24,582dff0b3f065a52 X-Google-Attributes: gid107f24,public X-Google-Thread: 109fba,582dff0b3f065a52 X-Google-Attributes: gid109fba,public X-Google-Thread: 103376,bc1361a952ec75ca X-Google-Attributes: gid103376,public X-Google-Thread: 1014db,582dff0b3f065a52 X-Google-Attributes: gid1014db,public X-Google-ArrivalTime: 2001-08-06 08:04:04 PST Path: archiver1.google.com!newsfeed.google.com!newsfeed.stanford.edu!skynet.be!freenix!enst!univ-angers.fr!univ-rennes1.fr!irisa.fr!not-for-mail From: Yoann Padioleau Newsgroups: comp.lang.ada,comp.lang.c,comp.lang.c++,comp.lang.functional Subject: Re: How Ada could have prevented the Red Code distributed denial of service attack. Date: 06 Aug 2001 17:02:55 +0200 Organization: IRISA, Campus de Beaulieu, 35042 Rennes Cedex, FRANCE Message-ID: References: <9k9if8$rn3$1@elf.eng.bsdi.com> <3B687EDF.9359F3FC@mediaone.net> <5267be60.0108021911.7d8fe4@posting.google.com> <3B6B637F.E3FA243E@worldnet.att.net> <3b6ea164.1479721766@news.worldonline.nl> NNTP-Posting-Host: merlin.irisa.fr X-Trace: news.irisa.fr 997110187 27067 131.254.50.62 (6 Aug 2001 15:03:07 GMT) X-Complaints-To: usenet@irisa.fr NNTP-Posting-Date: 6 Aug 2001 15:03:07 GMT X-Newsreader: Gnus v5.7/Emacs 20.7 Xref: archiver1.google.com comp.lang.ada:11371 comp.lang.c:72461 comp.lang.c++:80319 comp.lang.functional:7342 Date: 2001-08-06T15:03:07+00:00 List-Id: info@hoekstra-uitgeverij.nl (Richard Bos) writes: > Ted Dennison wrote: > > > compiler. Remember, "printf" actually has to stop and interpret the input string > > to look for replacements. > > No, it doesn't; not unless the format string isn't a constant. Yes it does. The source code from printf is in the C library, so the compiler cant optimise code such as 'printf("%d %f %s",i,f,str)', he cant generate print_int(i);print_space(4);print_float(f);.... This is called partial evaluation, and in practice it is hard to put in a compiler. > Richard -- Yoann Padioleau, INSA de Rennes, France, http://www.irisa.fr/prive/padiolea Opinions expressed here are only mine. Je n'�cris qu'� titre personnel. **____ Get Free. Be Smart. Simply use Linux and Free Software. ____**