Great Circle Associates Firewalls
(February 1997)
 

Indexed By Date: [Previous] [Next] Indexed By Thread: [Previous] [Next]

Subject: Re: Stack overflows in firewalls
From: "Marcus J. Ranum" <mjr @ clark . net>
Organization: V-ONE Corp Baltimore office
Date: Wed, 26 Feb 1997 23:42:27 +0000
To: firewalls @ GreatCircle . COM (Firewalls-Digest)
Comments: Authenticated sender is <mjr @ mail . clark . net . >
Reply-to: mjr @ clark . net

"Bruce D. Wilner" <bdwilner @
 nsli .
 com> writes:
> >> Environments such as MODULA-3 or even visual bloody BASIC are 
> >> probably better for writing secure applications than C.
> Ah!  I don't imagine these tools, or parts thereof, were themselves
> developed in C atop a shaky platform?

Modula-3 compiler bootstraps in C, then the final compiler
is actually built and written in Modula-3. Unsurprisingly, it
doesn't tend to crash like C compilers sometimes do...

> One must write a few compilers, or architect a few development
> environments, as others have, before complaining about the safety of
> this language environment or that.
> (Oops!  Maybe I shouldn't be critical!  One of the sequacious victims of
> the peculiar variety of demagoguery oft-witnessed on this forum will
> complain that I am a NET.LOON or have not "been around" as long as
> others.)

I didn't realize you were trying to be critical. :) One does not
have to be a mechanic for grand prix race cars to understand
desireable propeties in them and know how to drive them. Unless
of course you're just trying to argue, in which case let's not waste
the time.
 
Even if you don't want to respect my opinions about C and
programming environments, perhaps it would help if I mentioned
that at various times Dennis and Brian have apparently been
heard to voice similar sentiments on some of those issues. :)
The miserable history of security software written in C pretty
much speaks for itself, too...

>  However, please be careful before dismissing the work of senior
> architects and titans who thought long and hard to craft something that
> is useful forever.

I find this contradictory. In one posting you combine, "don't
dismiss me, Bruce, because I am not an 'old timer' -- I still deserve
respect" with a plea to "respect your elders."     Which do you want?
Respect for seniority or respect for deeds. Remind us what you've
done to deserve either?

mjr.
-----
Marcus J. Ranum, Chief Scientist, V-ONE Corporation
Work:       http://www.v-one.com
Personal:   http://www.clark.net/pub/mjr

Indexed By Date Previous: Re: CNET story on Microsoft defending ActiveX today
From: Tom Zerucha <root @ deimos . ceddec . com>
Next: Re: irc and firewalls
From: Kevin McPeake <cowboy @ home . byelex . nl>
Indexed By Thread Previous: Re: Stack overflows in firewalls
From: "Bruce D. Wilner" <bdwilner @ nsli . com>
Next: problems with W3C Httpd as proxy
From: Marco Venditti <venditti @ bigfoot . com>

Google
 
Search Internet Search www.greatcircle.com