From mboxrd@z Thu Jan  1 00:00:00 1970
X-Msuck: nntp://news.gmane.io/gmane.emacs.gnus.general/63635
Path: news.gmane.org!not-for-mail
From: Richard Stallman <rms@gnu.org>
Newsgroups: gmane.emacs.devel,gmane.emacs.gnus.general
Subject: Re: Security flaw in pgg-gpg-process-region? (was:
	pgg-gpg-process-region)
Date: Sun, 03 Sep 2006 11:16:30 -0400
Message-ID: <E1GJti2-0003TL-26@fencepost.gnu.org>
References: <b4maca88q6i.fsf@jpl.org>
	<def1aabc-69b9-4b1d-bb84-e65c63540eac@well-done.deisui.org>
	<b4mmze82cse.fsf@jpl.org> <b4mwtdbfqob.fsf@jpl.org>
	<9c79059a-61a9-4fa4-8376-638753320a14@well-done.deisui.org>
	<b4mpsj3gw1s.fsf@jpl.org> <b4my7xrfg5o.fsf@jpl.org>
	<4aaf7080-0e3d-4a75-aff5-f9d5bcd0437f@well-done.deisui.org>
	<87fyjz2gaj.fsf@pacem.orebokech.com>
	<v9iroj49cz.fsf@marauder.physik.uni-ulm.de>
	<v9mz9itt6y.fsf_-_@marauder.physik.uni-ulm.de>
Reply-To: rms@gnu.org
NNTP-Posting-Host: main.gmane.org
Content-Type: text/plain; charset=ISO-8859-15
X-Trace: sea.gmane.org 1157296630 3983 80.91.229.2 (3 Sep 2006 15:17:10 GMT)
X-Complaints-To: usenet@sea.gmane.org
NNTP-Posting-Date: Sun, 3 Sep 2006 15:17:10 +0000 (UTC)
Cc: jas@extundo.com, ueno@unixuser.org, satyaki@chicory.stanford.edu,
	ding@gnus.org, emacs-devel@gnu.org
Original-X-From: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Sun Sep 03 17:17:08 2006
Return-path: <emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org>
Envelope-to: ged-emacs-devel@m.gmane.org
Original-Received: from lists.gnu.org ([199.232.76.165])
	by ciao.gmane.org with esmtp (Exim 4.43)
	id 1GJtid-0007yl-7J
	for ged-emacs-devel@m.gmane.org; Sun, 03 Sep 2006 17:17:07 +0200
Original-Received: from localhost ([127.0.0.1] helo=lists.gnu.org)
	by lists.gnu.org with esmtp (Exim 4.43)
	id 1GJtic-0005Mo-Ko
	for ged-emacs-devel@m.gmane.org; Sun, 03 Sep 2006 11:17:06 -0400
Original-Received: from mailman by lists.gnu.org with tmda-scanned (Exim 4.43)
	id 1GJti6-00056S-64
	for emacs-devel@gnu.org; Sun, 03 Sep 2006 11:16:34 -0400
Original-Received: from exim by lists.gnu.org with spam-scanned (Exim 4.43)
	id 1GJti5-000568-NE
	for emacs-devel@gnu.org; Sun, 03 Sep 2006 11:16:33 -0400
Original-Received: from [199.232.76.173] (helo=monty-python.gnu.org)
	by lists.gnu.org with esmtp (Exim 4.43) id 1GJti5-000563-JC
	for emacs-devel@gnu.org; Sun, 03 Sep 2006 11:16:33 -0400
Original-Received: from [199.232.76.164] (helo=fencepost.gnu.org)
	by monty-python.gnu.org with esmtp (Exim 4.52) id 1GJtsP-0007An-Iq
	for emacs-devel@gnu.org; Sun, 03 Sep 2006 11:27:13 -0400
Original-Received: from rms by fencepost.gnu.org with local (Exim 4.34)
	id 1GJti2-0003TL-26; Sun, 03 Sep 2006 11:16:30 -0400
Original-To: Reiner Steib <Reiner.Steib@gmx.de>
In-reply-to: <v9mz9itt6y.fsf_-_@marauder.physik.uni-ulm.de> (message from
	Reiner Steib on Sat, 02 Sep 2006 13:16:05 +0200)
X-BeenThere: emacs-devel@gnu.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: "Emacs development discussions." <emacs-devel.gnu.org>
List-Unsubscribe: <http://lists.gnu.org/mailman/listinfo/emacs-devel>,
	<mailto:emacs-devel-request@gnu.org?subject=unsubscribe>
List-Archive: <http://lists.gnu.org/pipermail/emacs-devel>
List-Post: <mailto:emacs-devel@gnu.org>
List-Help: <mailto:emacs-devel-request@gnu.org?subject=help>
List-Subscribe: <http://lists.gnu.org/mailman/listinfo/emacs-devel>,
	<mailto:emacs-devel-request@gnu.org?subject=subscribe>
Original-Sender: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org
Errors-To: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org
Xref: news.gmane.org gmane.emacs.devel:59278 gmane.emacs.gnus.general:63635
Archived-At: <http://permalink.gmane.org/gmane.emacs.gnus.general/63635>

    In current Emacs CVS in fact `call-process-region' uses temp files.
    Bad.  I think this is a severe security problem, isn't it?

As far as I know, this not bad at all.
Would you please explain why you think it is a problem?