Re: PDUTR #26 posted

From: David Starner (dstarner98@aasaa.ofe.org)
Date: Mon Sep 17 2001 - 22:28:57 EDT


On Sun, Sep 16, 2001 at 09:28:34PM +0100, David Hopwood wrote:
> It doesn't reopen that specific type of security hole, because irregular
> UTF-8 sequences (as defined by Unicode 3.1) can only decode to characters above
> 0xFFFF, and those characters are unlikely to be "special" for any application
> protocol.

What about directories? Directories can have arbitrary names, and need to
be compared and checked.

-- 
David Starner - dstarner98@aasaa.ofe.org
Pointless website: http://dvdeug.dhis.org
"I don't care if Bill personally has my name and reads my email and 
laughs at me. In fact, I'd be rather honored." - Joseph_Greg



This archive was generated by hypermail 2.1.2 : Mon Sep 17 2001 - 20:57:23 EDT