Re: Specification for Trusted PLs?

Поиск
Список
Период
Сортировка
От Robert Haas
Тема Re: Specification for Trusted PLs?
Дата
Msg-id AANLkTinr7UhByQm8eQwJNWMVjtkPPCxdvgHERkh302o4@mail.gmail.com
обсуждение исходный текст
Ответ на Re: Specification for Trusted PLs?  (David Fetter <david@fetter.org>)
Ответы Re: Specification for Trusted PLs?  (Tom Lane <tgl@sss.pgh.pa.us>)
Re: Specification for Trusted PLs?  (Stephen Frost <sfrost@snowman.net>)
Re: Specification for Trusted PLs?  (Craig Ringer <craig@postnewspapers.com.au>)
Список pgsql-hackers
On Fri, May 21, 2010 at 1:58 PM, David Fetter <david@fetter.org> wrote:
> On Fri, May 21, 2010 at 01:45:45PM -0400, Stephen Frost wrote:
>> * David Fetter (david@fetter.org) wrote:
>> > That is *precisely* the business we need to be in, at least for the
>> > languages we ship, and it would behoove us to test languages we don't
>> > ship so we can warn people when they don't pass.
>>
>> k, let's start with something simpler first tho- I'm sure we can pull in
>> the glibc regression tests and run them too.  You know, just in case
>> there's a bug there, somewhere.
>
> That's pretty pure straw man argument.  I expect much higher quality
> trolling.  D-.

I'm sorely tempted to try to provide some higher-quality trolling, but
in all seriousness I think that (1) we could certainly use much better
regression tests in many areas of which this is one and (2) it will
never be possible to catch all security bugs - in particular - via
regression testing because they typically stem from cases people
didn't consider.  So... can we get back to coming up with a reasonable
definition, and if somebody wants to write some regression tests, all
the better?

--
Robert Haas
EnterpriseDB: http://www.enterprisedb.com
The Enterprise Postgres Company


В списке pgsql-hackers по дате отправления:

Предыдущее
От: Tom Lane
Дата:
Сообщение: Re: Specification for Trusted PLs?
Следующее
От: Tom Lane
Дата:
Сообщение: Re: Specification for Trusted PLs?