From mboxrd@z Thu Jan 1 00:00:00 1970 X-Msuck: nntp://news.gmane.io/gmane.emacs.gnus.general/78125 Path: news.gmane.org!not-for-mail From: Lars Magne Ingebrigtsen Newsgroups: gmane.emacs.gnus.general Subject: normal-mode considered dangerous Date: Mon, 28 Mar 2011 19:05:59 +0200 Organization: Programmerer Ingebrigtsen Message-ID: NNTP-Posting-Host: lo.gmane.org Mime-Version: 1.0 Content-Type: text/plain Content-Transfer-Encoding: quoted-printable X-Trace: dough.gmane.org 1301332051 15867 80.91.229.12 (28 Mar 2011 17:07:31 GMT) X-Complaints-To: usenet@dough.gmane.org NNTP-Posting-Date: Mon, 28 Mar 2011 17:07:31 +0000 (UTC) To: ding@gnus.org Original-X-From: ding-owner+M26436@lists.math.uh.edu Mon Mar 28 19:07:23 2011 Return-path: Envelope-to: ding-account@gmane.org Original-Received: from util0.math.uh.edu ([129.7.128.18]) by lo.gmane.org with esmtp (Exim 4.69) (envelope-from ) id 1Q4FuV-0006gT-0f for ding-account@gmane.org; Mon, 28 Mar 2011 19:07:23 +0200 Original-Received: from localhost ([127.0.0.1] helo=lists.math.uh.edu) by util0.math.uh.edu with smtp (Exim 4.63) (envelope-from ) id 1Q4Fte-0004l9-5p; Mon, 28 Mar 2011 12:06:30 -0500 Original-Received: from mx1.math.uh.edu ([129.7.128.32]) by util0.math.uh.edu with esmtps (TLSv1:AES256-SHA:256) (Exim 4.63) (envelope-from ) id 1Q4Ftc-0004ku-NG for ding@lists.math.uh.edu; Mon, 28 Mar 2011 12:06:28 -0500 Original-Received: from quimby.gnus.org ([80.91.231.51]) by mx1.math.uh.edu with esmtp (Exim 4.72) (envelope-from ) id 1Q4FtQ-0003lX-5E for ding@lists.math.uh.edu; Mon, 28 Mar 2011 12:06:21 -0500 Original-Received: from lo.gmane.org ([80.91.229.12]) by quimby.gnus.org with esmtp (Exim 4.72) (envelope-from ) id 1Q4FtN-0003O6-VB for ding@gnus.org; Mon, 28 Mar 2011 19:06:13 +0200 Original-Received: from list by lo.gmane.org with local (Exim 4.69) (envelope-from ) id 1Q4FtL-00063G-6R for ding@gnus.org; Mon, 28 Mar 2011 19:06:11 +0200 Original-Received: from cm-84.215.51.58.getinternet.no ([84.215.51.58]) by main.gmane.org with esmtp (Gmexim 0.1 (Debian)) id 1AlnuQ-0007hv-00 for ; Mon, 28 Mar 2011 19:06:11 +0200 Original-Received: from larsi by cm-84.215.51.58.getinternet.no with local (Gmexim 0.1 (Debian)) id 1AlnuQ-0007hv-00 for ; Mon, 28 Mar 2011 19:06:11 +0200 X-Injected-Via-Gmane: http://gmane.org/ Mail-Followup-To: ding@gnus.org Original-Lines: 96 Original-X-Complaints-To: usenet@dough.gmane.org X-Gmane-NNTP-Posting-Host: cm-84.215.51.58.getinternet.no Face: iVBORw0KGgoAAAANSUhEUgAAADAAAAAwBAMAAAClLOS0AAAAElBMVEUEAQBROzUNCAaOdGOu noza1sHh7llOAAACV0lEQVQ4jU2UQWLjIAxFZdIDDMbdg5zZDwYfIAYfIDHc/yr9Eum0LJwE8fjS lxyiX2tKtSYb8Cwznb23ruuij95qxbeW8kH2Z9Eq8VYynocSKe2yQ397V6IOwqWUrCt5o1vX3ToI nE8JJ1tTDbmhWgdC9lM+e5vprklUEQFRoJBOzeoup3svztoNGnIcO1GJlmp7E70qPwit40qi4TT3 Gq0dhKbf20ZZz39raFYif5DkA2+sEB+ISqk9FxDnOQzqT/qoKe7fXmVsS8opRdG49NIMjaWOJcQd nxLAORD4ocVHS5+jQCkGBVbEJVofZkc+YkKxadgu2yXFG4RLnKMNV5opIFG5CcSaa06WZzIhv4So QyY6EHXmaHkBwYJos6LLonzWyGF/0q7DoOL8KXVqUVY0GCuoJWFXo3ABCPFqjM8Tw4BW5MIsp0Rh Zl00VR9qjmQWnMp1WKjExT7nB5ED4cSMQdH6cEdGpuazvxB4OydEy1dFbSaE34THiGYdCr5jGKS2 rIxkJXLzNBvPIi4FYTEtve3demJ5J3gYgvhzggnuyT+vi5enIdx0Xu5FwY+fdHukvEVH0sBHPczq jdfAKgbWQrRfS6v/2L4vM8VGu+B9ouW4l3Pj7X2zyY96YpLxjQF3O39rBHQZkJy7oaCX3OQRYKNh WX4tyW3Mft0YlgzbNRIs2prQDx5TIh1Pqukl6NdoZsrqBxAtk9kk66c/t0MJZeKIrMGz8dM8TFTG apqwdkZ62/+/DCcjQ8aYzSBzo0Qp2qsU2UMjEgKTpkL8nhKWVrC2g78A1IjJ0jxbx2cAAAAASUVO RK5CYII= Mail-Copies-To: never X-Now-Playing: Siouxsie and the Banshees's _Kaleidoscope_: "Happy House" User-Agent: Gnus/5.110016 (No Gnus v0.16) Emacs/24.0.50 (gnu/linux) Cancel-Lock: sha1:2G8RH2DXcoZCOGC+c+uZeNCpCGc= X-Spam-Score: -1.9 (-) List-ID: Precedence: bulk Xref: news.gmane.org gmane.emacs.gnus.general:78125 Archived-At: While viewing <87y63zmd61.fsf@gilgamesch.quim.ucm.es> (on news.gmane.org), I get the backtrace below. `mm-display-inline-fontify' calls `normal-mode' now, and I think that's a potential recipe for disaster. It's one thing to institute a mode of some kind when you're reading a local file, but doing it when receiving a message means that any exploitable hole in any of the modes in Emacs can be used remotely. So I think there should be a white-list before calling `normal-mode'. Debugger entered--Lisp error: (args-out-of-range "vc-bug" 23 6) dir-locals-collect-variables(((emacs-lisp-mode (show-trailing-whitespace = . t))) "/home/larsi/pgnus/lisp/" nil) hack-dir-local-variables() hack-local-variables() normal-mode() mm-display-inline-fontify((#> ("text/plain" (charset . "i= so-8859-1")) quoted-printable nil ("inline" (filename . "vc-bug")) nil nil = nil)) mm-inline-text((#> ("text/plain" (charset . "iso-8859-1")= ) quoted-printable nil ("inline" (filename . "vc-bug")) nil nil nil)) mm-display-inline((#> ("text/plain" (charset . "iso-8859-= 1")) quoted-printable nil ("inline" (filename . "vc-bug")) nil nil nil)) mm-display-part((#> ("text/plain" (charset . "iso-8859-1"= )) quoted-printable nil ("inline" (filename . "vc-bug")) nil nil nil) t) byte-code("\203=00\306\211A@ \"\203=00\307\300\310\"\210\202=00\n\211\2= 05\"\311\312=0B!!)\203/r\nq\210\f)\2020\f\203:\306\313 \"\204x\314!?\205T\3= 158?\206T\3158@\316\232\206T\317!\211)\203x\320!\203x\321!\203l\322!\204r\3= 23 !\203x\324*\202\231=0D\325\211@;\203\210=0D@\202\214=0DA@@)\326\"@)\327\= 232\203\231\324+,GT\310-\211.B,B,*\203\353=0D\325\211@;\203\277=0D@\202\303= =0DA@@)\326\"@)\330\232\203\353\331\332n\204\327\333\202\351o\204\344`SSf\3= 32=3D\203\350\334\202\351\335\"\210*\203\376\336 !\203\376=0E./=3D\203=01\3= 37=0E.*\206=01)\205=01+C#\210\340 \210\3240`-*\203\226=0E0\203*\341y\210`-1= \212\310\342\343\217\2102)345\344=3D\203[=0E6\211\205L\311\312=0B!!)\203[r6= q\2107)\202]=0E7\2118\204g\324\202\201=0E9;\203v\30698\"\202\201=0E9:\205\2= 01=0E89\235?\205\207=0E:):\345\324\"\210+db\210\202\265=0E+\203\265=0E)\203= \265=0E0\203\253\341y\210`-\340 \210\346!\210db\210\212\214-`}\210=0E;=3D\2= 03\335\347\310\335\211\211@;\203\324=0D@\202\330=0DA@@)$\202.\310<;\310=3D\= 211>\203=02>@\211=3D;\204=02=3DA@@\350\232\204=02=3DA\211>\204\353*\347= \310=0E<>G> ("text/plain" (charset . "is= o-8859-1")) quoted-printable nil ("inline" (filename . "vc-bug")) nil nil n= il)) gnus-mime-display-part((#> ("text/plain" (charset . "iso-= 8859-1")) quoted-printable nil ("inline" (filename . "vc-bug")) nil nil nil= )) mapcar(gnus-mime-display-part ((#> ("text/plain") nil (la= mbda nil (let ((inhibit-read-only t)) (delete-region # #))) nil nil nil nil) (#= > ("text/plain" (charset . "iso-8859-1")) quoted-printable = nil ("inline" (filename . "vc-bug")) nil nil nil) (#> ("tex= t/plain" (charset . "iso-8859-1")) quoted-printable nil nil nil nil nil) (#= > ("text/plain" (charset . "us-ascii")) 7bit nil ("inline")= nil nil nil))) gnus-mime-display-mixed(((#> ("text/plain") nil (lambda n= il (let ((inhibit-read-only t)) (delete-region # #))) nil nil nil nil) (#> ("text/plain" (charset . "iso-8859-1")) quoted-printable nil ("= inline" (filename . "vc-bug")) nil nil nil) (#> ("text/plai= n" (charset . "iso-8859-1")) quoted-printable nil nil nil nil nil) (#> ("text/plain" (charset . "us-ascii")) 7bit nil ("inline") nil n= il nil))) gnus-mime-display-part((#("multipart/mixed" 0 15 (boundary "=3D-=3D-=3D" = buffer # from "oub@mat.ucm.es" start nil)) (#= > ("text/plain") nil (lambda nil (let ((inhibit-read-only t)) (delete-regio= n # #))) nil nil nil nil) (#> ("text/plain" (charset . "iso-885= 9-1")) quoted-printable nil ("inline" (filename . "vc-bug")) nil nil nil) (= #> ("text/plain" (charset . "iso-8859-1")) quoted-printable= nil nil nil nil nil) (#> ("text/plain" (charset . "us-asci= i")) 7bit nil ("inline") nil nil nil))) gnus-display-mime() gnus-article-prepare-display() gnus-article-prepare(34597 nil) gnus-summary-display-article(34597 nil) gnus-summary-select-article(nil force) gnus-summary-show-article(nil) call-interactively(gnus-summary-show-article nil nil) --=20 (domestic pets only, the antidote for overdose, milk.) larsi@gnus.org * Lars Magne Ingebrigtsen