On Wed, Apr 18, 2012 at 5:59 PM, Carsten Haitzler <ras...@rasterman.com> wrote: > On Wed, 18 Apr 2012 15:40:39 +1000 David Seikel <onef...@gmail.com> said: >> Does eet use a checksum or anything to detect if eet files got >> corrupted? If so, how does the app find out about it? eet_data_read() >> returning NULL? > > no checksums. if compressed, decompression of a data segment fails and u get > NULL. if header is unusable (doesnt have keys or points out of file) u get > null, if header points to wrong place in file - u dont know - u get wrong data > (if compressed it'd be not able to be decompressed). same with signed data. if > its not compressed and not signed, unless the file is truncated during or > before the data blob, you won't know its corrupt unless u have a way to verify > the data blob itself. as such eet encoded data structs willl probably fail to > decode in this situation even if not compressed as u are pointing to garbage > that will make no sense. if you are hell bent on ensuring the file u have is > exactly as it was intended originally - checksum the whole file yourself and > keep md5/sha1 or whatever sums separately. :)
Eet does run a lot of extensive test during opening, so out of range, out of data zone, corrupted dictionary. We are not yet checking for hole in data, section name, nor dictionary entry. We probably should. In all this case, eet_open will return NULL. For data section being compromised without touching the rest, eet will return NULL, if they are compressed and can't be uncompressed, it will also return NULL if it can't decode them. That pretty much limit the risk, but if you really want to be secure, then sign your eet file. -- Cedric BAIL ------------------------------------------------------------------------------ Better than sec? Nothing is better than sec when it comes to monitoring Big Data applications. Try Boundary one-second resolution app monitoring today. Free. http://p.sf.net/sfu/Boundary-dev2dev _______________________________________________ enlightenment-devel mailing list enlightenment-devel@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/enlightenment-devel
