Re: Security bugs

2025-06-14 Thread Ben Pfaff
I don't think that they would file a CVE at all if we didn't segfault. On Sat, Jun 14, 2025 at 6:45 AM Friedrich Beckmann < friedrich.beckm...@posteo.de> wrote: > So lets hope that those folks do not declare a „panic“ as > „Denial of Service“ as they do right now when we segfault. > Look for exam

Re: Security bugs

2025-06-14 Thread Friedrich Beckmann
So lets hope that those folks do not declare a „panic“ as „Denial of Service“ as they do right now when we segfault. Look for example here: https://www.cve.org/CVERecord?id=CVE-2025-32034 That is a CVE because the router becomes too slow. Which is a DoS. The pspp cves are also not claiming that

Re: Security bugs

2025-06-13 Thread Ben Pfaff
On Fri, Jun 13, 2025 at 12:02 PM Friedrich Beckmann < friedrich.beckm...@posteo.de> wrote: > > Am 13.06.2025 um 20:53 schrieb Ben Pfaff : > > > > I don't know yet whether it will be possible to wrap the new engine to > work with the existing GUI. If it is, it will take some effort. > > > > I start

Re: Security bugs

2025-06-13 Thread Friedrich Beckmann
> Am 13.06.2025 um 20:53 schrieb Ben Pfaff : > > I don't know yet whether it will be possible to wrap the new engine to work > with the existing GUI. If it is, it will take some effort. > > I started by working on a system file reader implementation, which is almost > done. There is also a b

Re: Security bugs

2025-06-13 Thread Ben Pfaff
I don't know yet whether it will be possible to wrap the new engine to work with the existing GUI. If it is, it will take some effort. I started by working on a system file reader implementation, which is almost done. There is also a basic implementation of the output layer, and a basic implementa

Re: Security bugs

2025-06-13 Thread Ben Pfaff
The GUI bugs are a different category, for sure. I feel despair about the GUI, too, not because of automatically generated and submitted reports but because I find that GTK+ in C is really difficult to understand and use properly and interface to our engine. My current concept for the rewrite, reg

Re: Security bugs

2025-06-13 Thread Friedrich Beckmann
Oh yes, I assumed that you want to port the pspp core and not the gui. But wouldn’t it be possible to keep the existing gui and just link to the „core“? I mean we already have the pspp library. Couldn’t that just be replaced by your rust version? You already have 37000 lines? Sounds more tha

Re: Security bugs

2025-06-13 Thread opensuse.lietuviu.kalba
Oh! Rust rewrite sounds very promising! Many thanks and best wishes -- Regards, Mindaugas 2025-06-13 21:21, Ben Pfaff rašė: The GUI bugs are a different category, for sure. I feel despair about the GUI, too, not because of automatically generated and submitted reports but because I find that G

Re: Security bugs

2025-06-13 Thread Friedrich Beckmann
you are a brave man! I just made some first steps with embedded rust and found it a new learning experience. I thought that this must be the feeling of new students when you read compiler messages and they just do not mean a lot to you. Then I copied the messages to google hoping to find somethi

Re: Security bugs

2025-06-13 Thread Ben Pfaff
It's impossible to keep up with the flood of "security" bugs that people generate automatically and submit. I am not going to try. I'm working on rewriting PSPP in Rust, which will by itself eliminate all of these and produce a better piece of software anyhow. On Fri, Jun 13, 2025 at 10:22 AM ope