[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]

Re: [patch] Syscall auditing - move "name=" field to the end



On Thu, 2005-03-17 at 12:08 -0600, Kris Wilson wrote:
> <br>Dumping in hex instead of string would have a testing impact.
> Using a string in quotes would be a<br>smaller hit, but there still
> would be additional impact to test the &quot;hex otherwise&quot; case.
> <br><br><br>

A string in quotes isn't sufficient -- a file name can contain quotes as
well as carriage returns. The only safe option is hex -- it's just a
question of whether it's "string or fall back to hex if dangerous" or
whether it's "just hex".

-- 
dwmw2


[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]