From mboxrd@z Thu Jan 1 00:00:00 1970 X-Msuck: nntp://news.gmane.io/gmane.emacs.gnus.general/63687 Path: news.gmane.org!not-for-mail From: Daiki Ueno Newsgroups: gmane.emacs.devel,gmane.emacs.gnus.general Subject: Re: Security flaw in pgg-gpg-process-region? Date: Wed, 06 Sep 2006 18:25:48 +0900 Message-ID: References: <9c79059a-61a9-4fa4-8376-638753320a14@well-done.deisui.org> <4aaf7080-0e3d-4a75-aff5-f9d5bcd0437f@well-done.deisui.org> <87fyjz2gaj.fsf@pacem.orebokech.com> <8980fd83-08b6-4aef-97f2-a659cd2eadb2@well-done.deisui.org> <180dcf90-af71-4f6d-b0d0-57d364218c73@broken.deisui.org> <6d43cc51-e472-405c-b372-dba7ef5a914d@broken.deisui.org> <2234179d-6686-49f4-b38b-b06788041225@well-done.deisui.org> <854pvnsetc.fsf@lola.goethe.zz> <99d9e329-f374-464a-baad-80c02d2a3382@broken.deisui.org> NNTP-Posting-Host: main.gmane.org Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII X-Trace: sea.gmane.org 1157534797 15741 80.91.229.2 (6 Sep 2006 09:26:37 GMT) X-Complaints-To: usenet@sea.gmane.org NNTP-Posting-Date: Wed, 6 Sep 2006 09:26:37 +0000 (UTC) Cc: Reiner.Steib@gmx.de, ding@gnus.org, emacs-devel@gnu.org Original-X-From: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Wed Sep 06 11:26:34 2006 Return-path: Envelope-to: ged-emacs-devel@m.gmane.org Original-Received: from lists.gnu.org ([199.232.76.165]) by ciao.gmane.org with esmtp (Exim 4.43) id 1GKtg1-0006Yg-3v for ged-emacs-devel@m.gmane.org; Wed, 06 Sep 2006 11:26:33 +0200 Original-Received: from localhost ([127.0.0.1] helo=lists.gnu.org) by lists.gnu.org with esmtp (Exim 4.43) id 1GKtg0-0001r3-KF for ged-emacs-devel@m.gmane.org; Wed, 06 Sep 2006 05:26:32 -0400 Original-Received: from mailman by lists.gnu.org with tmda-scanned (Exim 4.43) id 1GKtfg-0001mq-Ri for emacs-devel@gnu.org; Wed, 06 Sep 2006 05:26:13 -0400 Original-Received: from exim by lists.gnu.org with spam-scanned (Exim 4.43) id 1GKtfe-0001iV-KN for emacs-devel@gnu.org; Wed, 06 Sep 2006 05:26:12 -0400 Original-Received: from [199.232.76.173] (helo=monty-python.gnu.org) by lists.gnu.org with esmtp (Exim 4.43) id 1GKtfe-0001iD-FV for emacs-devel@gnu.org; Wed, 06 Sep 2006 05:26:10 -0400 Original-Received: from [210.231.96.69] (helo=well-done.deisui.org) by monty-python.gnu.org with esmtps (TLS-1.0:RSA_AES_256_CBC_SHA:32) (Exim 4.52) id 1GKtfh-0003gk-2o; Wed, 06 Sep 2006 05:26:13 -0400 Original-Received: from [150.82.173.221] (helo=well-done.deisui.org) by well-done.deisui.org with esmtps (TLS-1.0:DHE_RSA_AES_256_CBC_SHA1:32) (Exim 4.62) (envelope-from ) id 1GKtfK-0008IO-Ej; Wed, 06 Sep 2006 18:25:50 +0900 Original-To: rms@gnu.org X-Attribution: DU In-Reply-To: (Richard Stallman's message of "Wed, 06 Sep 2006 04:49:56 -0400") X-BeenThere: emacs-devel@gnu.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Emacs development discussions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Original-Sender: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Errors-To: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Xref: news.gmane.org gmane.emacs.devel:59431 gmane.emacs.gnus.general:63687 Archived-At: >>>>> In >>>>> Richard Stallman wrote: > Anyway, I fixed it in Gnus CVS so that passphrases are encoded with > locale-coding-system. I'm not sure if we should add a new user option > to control the encoding. > locale-coding-system exists to tell Emacs how to decode some system > messages which are encoded (outside Emacs) in the current locale. It > seems to be wrong for this use. Do you see some reason to think it is > right? > If you see a reason, please explain it to me. Otherwise, please make > a new option for this. I have no reason. I just followed the example of setenv which uses locale-coding-system for encoding the value of envvars. I prepared pgg-passphrase-coding-system in Gnus CVS. FYI $ grep locale-coding-system **/*.el | grep encode-coding-string env.el: (setq variable (encode-coding-string variable locale-coding-system))) env.el: (setq value (encode-coding-string value locale-coding-system))) hexl.el: (mapcar (lambda (s) (encode-coding-string s locale-coding-system)) term/x-win.el: (encode-coding-string text (or locale-coding-system Regards, -- Daiki Ueno