Return-Path: <tiff-bounces@lists.maptools.org>
Delivered-To: info@awaresystems.be
Received: (qmail 15188 invoked from network); 1 Sep 2008 18:49:36 -0000
Received: from judy.telenet-ops.be ([195.130.136.7])
          (envelope-sender <tiff-bounces@lists.maptools.org>)
          by angelia.telenet-ops.be (qmail-ldap-1.03) with SMTP
          for <info@awaresystems.be>; 1 Sep 2008 18:49:36 -0000
Received: from mindy.telenet-ops.be (mindy.telenet-ops.be [195.130.136.8])
	by judy.telenet-ops.be (8.13.1/8.13.1) with ESMTP id m81Ina5g008060
	for <info@awaresystems.be>; Mon, 1 Sep 2008 20:49:36 +0200
Received: from localhost (localhost.localdomain [127.0.0.1])
	by mindy.telenet-ops.be (Postfix) with SMTP id BAFB160006
	for <info@awaresystems.be>; Mon,  1 Sep 2008 20:49:36 +0200 (CEST)
Received: from circe.telenet-ops.be (circe.telenet-ops.be [195.130.132.51])
	by mindy.telenet-ops.be (Postfix) with ESMTP id B463160005
	for <info@awaresystems.be>; Mon,  1 Sep 2008 20:49:36 +0200 (CEST)
Received: from duke.maptools.org (r153.dmsolutions.ca [209.217.116.153])
	by circe.telenet-ops.be (Postfix) with ESMTP id 6E82033E8E
	for <info@awaresystems.be>; Mon,  1 Sep 2008 20:49:36 +0200 (CEST)
Received: from duke.maptools.org (duke.maptools.org [127.0.0.1])
	by duke.maptools.org (8.12.11/8.12.10) with ESMTP id m81IjA7O017570;
	Mon, 1 Sep 2008 14:46:20 -0400
Received: from scooby.simplesystems.org (scooby.simplesystems.org
	[65.66.246.67])
	by duke.maptools.org (8.12.11/8.12.10) with ESMTP id m81Ij6W3017567
	for <tiff@lists.maptools.org>; Mon, 1 Sep 2008 14:45:06 -0400
Received: from freddy.simplesystems.org (freddy.simplesystems.org
	[65.66.246.65])
	by scooby.simplesystems.org (8.12.10+Sun/8.12.10) with ESMTP id
	m81Ij3CI009932; Mon, 1 Sep 2008 13:45:03 -0500 (CDT)
Date: Mon, 1 Sep 2008 13:45:03 -0500 (CDT)
From: Bob Friesenhahn <bfriesen@simple.dallas.tx.us>
X-X-Sender: bfriesen@freddy.simplesystems.org
To: Rogier Wolff <R.E.Wolff@bitwizard.nl>
Subject: Re: [Tiff] Some security fixes from RHEL
In-Reply-To: <20080901181923.GC23465@bitwizard.nl>
Message-ID: <Pine.SOC.4.64.0809011339410.1110@freddy.simplesystems.org>
References: <200808300053.35585.even.rouault@mines-paris.org>
	<48BAB60F.7040207@pobox.com>
	<Pine.SOC.4.64.0808311028060.1110@freddy.simplesystems.org>
	<48BB143F.4020301@howardsilvan.com>
	<Pine.SOC.4.64.0808311704020.1110@freddy.simplesystems.org>
	<20080901062919.GA12796@bitwizard.nl>
	<5B33A3A0-69D9-4A7B-9F40-EEED0ED435C9@telegraphics.com.au>
	<20080901071254.GB12796@bitwizard.nl>
	<Pine.SOC.4.64.0809011038560.1110@freddy.simplesystems.org>
	<20080901181923.GC23465@bitwizard.nl>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII; format=flowed
Cc: Tiff List <tiff@lists.maptools.org>
X-BeenThere: tiff@lists.maptools.org
X-Mailman-Version: 2.1.4
Precedence: list
List-Id: TIFF and libtiff discussion <tiff.lists.maptools.org>
List-Unsubscribe: <http://lists.maptools.org/mailman/listinfo/tiff>,
	<mailto:tiff-request@lists.maptools.org?subject=unsubscribe>
List-Archive: <http://lists.maptools.org/mailman/private/tiff>
List-Post: <mailto:tiff@lists.maptools.org>
List-Help: <mailto:tiff-request@lists.maptools.org?subject=help>
List-Subscribe: <http://lists.maptools.org/mailman/listinfo/tiff>,
	<mailto:tiff-request@lists.maptools.org?subject=subscribe>
Sender: tiff-bounces@lists.maptools.org
Errors-To: tiff-bounces@lists.maptools.org
X-SpamCatcher-Score: 10 [X]

On Mon, 1 Sep 2008, Rogier Wolff wrote:
>
> Maybe it's better if I just post it online:
>
> 	http://prive.bitwizard.nl/htdocs/tifftest.tgz
>
> My guess is that running it will give you some corner cases within the
> hour. Debugging those should take about an hour each. And fixing it

The package looks useful.

For my own testing, I have found it useful to use Unix 'ulimit' to 
limit how many seconds the code is allowed to run.  For example 
'ulimit -t 3'.  A pretty common problem is code which runs far too 
long, or even forever.

It is best to run the code with a malloc debug library as well as with 
stack checking/barriers in place to detect any attempt to overwrite 
the stack.  I am not sure if GCC supports the stack checking feature 
so some other compiler may be required.

Bob
======================================
Bob Friesenhahn
bfriesen@simple.dallas.tx.us, http://www.simplesystems.org/users/bfriesen/
GraphicsMagick Maintainer,    http://www.GraphicsMagick.org/

_______________________________________________
Tiff mailing list: Tiff@lists.maptools.org
http://lists.maptools.org/mailman/listinfo/tiff
http://www.remotesensing.org/libtiff/
