Openwall GNU/*/Linux - a small security-enhanced Linux distro for servers
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Fri, 11 Sep 2015 09:04:32 +0800
From: Kai Zhao <loverszhao@...il.com>
To: john-dev@...ts.openwall.com
Subject: Re: auditing our use of FMT_* flags

Hi Alexander,

On Fri, Sep 11, 2015 at 12:42 AM, Solar Designer <solar@...nwall.com> wrote:
>
>> Since JimF has add the flag for MediaWiki, PHPS and PHPS2, I think
>> I should add these formats to whitelist. Maybe also includes
>> dynamic=md5($p). Should I ?
>
> I don't see why you would want to whitelist anything.  Do your checks
> still detect errors after Jim's fixes?  If so, why do they?
>

There is no FMT_SPLIT error or warning after Jim's fixes. So we do not
need whitelist anything.


Thanks,

Kai

Powered by blists - more mailing lists

Your e-mail address:

Powered by Openwall GNU/*/Linux - Powered by OpenVZ