From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.4 (2020-01-24) on inbox.vuxu.org X-Spam-Level: X-Spam-Status: No, score=-0.8 required=5.0 tests=DKIM_SIGNED,DKIM_VALID, DKIM_VALID_AU,HEADER_FROM_DIFFERENT_DOMAINS,HTML_MESSAGE, MAILING_LIST_MULTI autolearn=ham autolearn_force=no version=3.4.4 Received: from minnie.tuhs.org (minnie.tuhs.org [IPv6:2600:3c01:e000:146::1]) by inbox.vuxu.org (Postfix) with ESMTP id EFB402652C for ; Mon, 20 May 2024 15:06:58 +0200 (CEST) Received: from minnie.tuhs.org (localhost [IPv6:::1]) by minnie.tuhs.org (Postfix) with ESMTP id AD50343AEB; Mon, 20 May 2024 23:06:53 +1000 (AEST) Received: from mail-qv1-xf30.google.com (mail-qv1-xf30.google.com [IPv6:2607:f8b0:4864:20::f30]) by minnie.tuhs.org (Postfix) with ESMTPS id 7387B43AEA for ; Mon, 20 May 2024 23:06:47 +1000 (AEST) Received: by mail-qv1-xf30.google.com with SMTP id 6a1803df08f44-6aacd1d24deso5752776d6.1 for ; Mon, 20 May 2024 06:06:47 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=dartmouth.edu; s=google1; t=1716210406; x=1716815206; darn=tuhs.org; h=to:subject:message-id:date:from:mime-version:from:to:cc:subject :date:message-id:reply-to; bh=V6n32z1u/2YlWa0uW8M4fDZoYroWZhcvNEmfZdsh5O8=; b=JuFEWcH85DPDt5ADTkDOCmZRS7HqouQdY5MGrP7bt3CVnIaggT1hRtqPMg6Vg0bX/0 2tHT89XfoQarl2UEjEaPZSB/ZD7c0Smsu+H5lSc9v9Gnd5JRHUBISvikDPJAn9+bBaRa AHVgmiY0QfDqp+/G6I24baLMg6/PbusYaxDY2X6lvnRweaVnn65Jmy66llqULHMlQz+0 JqNuPBmmSGRgDhUOO28G0UALW0r5uN0Hh9XsFsjRawkGdWmRrqcvBkCl0o3TMxCtIjqs lV09kJSLvg+aGkLv21Y8mpeM5LCP4KD0CwVQSPbMP2Eg7LXB7iTU9luSVm1B9XamCc4V 7NGA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1716210406; x=1716815206; h=to:subject:message-id:date:from:mime-version:x-gm-message-state :from:to:cc:subject:date:message-id:reply-to; bh=V6n32z1u/2YlWa0uW8M4fDZoYroWZhcvNEmfZdsh5O8=; b=DbMDeM7TJIoWkqe4GIGPhmNpzUBmIjDjC1eLtnAlv+EIlmD2OA0mLXaWiIfcfUHo4Z M4VrZGWRt4mkPS3oqsxAZTGzhopoVvHRv3hfQKY88mQ6lvek0grIhuGHMXh4BF7hbRhC FwY0Hy5X7npI9DW2Mv2vPr6Raez9t3MNcgZBwdzunHj/BU3BVmdDhDDaQLMhpgf1ybE4 XXJfg53vAU8ShOY7L2SSqjbDYLigHvpnTzdu05skMUIB6y/MfWPQDdyIrIsMEBnlL5/8 dYnmpxl4U063aq0gHZ2VKGb6ICBHThumd0XEGn7zY9aQTPp8zE4/yRJ6zwmkZdCBk+bM xBnQ== X-Gm-Message-State: AOJu0YyfFRQo/UQhj7Rd1/pSL/FDZbTSpL/62WRDGqD0C8hmVf4aZQHS 7EAeu5R0aFjwMN0drgetP/hsvwpupXVl5Swl8Aw49BV4zpL7r/k0xYuLqtn82PL8RVE9w2BFTgG RqsKwP2NT9diPi5C37Ng2J3+OH3bVB/2i/Sj6x8Rd6+sbGwm6 X-Google-Smtp-Source: AGHT+IE51tNZcv0yrtlzTJ1OvbUTZ5UjXlFfrqbQzlZAoveWdSB4Oz/y7y+RkG74SfMF9/Qz7+CSqx+mbStJKZIMUiI= X-Received: by 2002:a05:6214:2463:b0:6aa:47d2:ab with SMTP id 6a1803df08f44-6aa47d2039dmr50659106d6.22.1716210406252; Mon, 20 May 2024 06:06:46 -0700 (PDT) MIME-Version: 1.0 From: Douglas McIlroy Date: Mon, 20 May 2024 09:06:30 -0400 Message-ID: To: TUHS main list Content-Type: multipart/alternative; boundary="000000000000a0171e0618e25f34" Message-ID-Hash: QCWDQYPNTEK34SLR5TULMKDHDHDY6GYO X-Message-ID-Hash: QCWDQYPNTEK34SLR5TULMKDHDHDY6GYO X-MailFrom: douglas.mcilroy@dartmouth.edu X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header X-Mailman-Version: 3.3.6b1 Precedence: list Subject: [TUHS] A fuzzy awk. (Was: The 'usage: ...' message.) List-Id: The Unix Heritage Society mailing list Archived-At: List-Archive: List-Help: List-Owner: List-Post: List-Subscribe: List-Unsubscribe: --000000000000a0171e0618e25f34 Content-Type: text/plain; charset="UTF-8" I'm surprised by nonchalance about bad inputs evoking bad program behavior. That attitude may have been excusable 50 years ago. By now, though, we have seen so much malicious exploitation of open avenues of "undefined behavior" that we can no longer ignore bugs that "can't happen when using the tool correctly". Mature software should not brook incorrect usage. "Bailing out near line 1" is a sign of defensive precautions. Crashes and unjustified output betray their absence. I commend attention to the LangSec movement, which advocates for rigorously enforced separation between legal and illegal inputs. Doug --000000000000a0171e0618e25f34 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
I'm surprised by nonchalance about bad inputs evoking = bad program behavior. That attitude may have been excusable 50 years ago. B= y now, though, we have seen so much malicious exploitation of open avenues = of "undefined behavior" that we can no longer ignore bugs that &q= uot;can't happen when using the tool correctly". Mature software s= hould not brook incorrect usage.

"Bailing out near = line 1" is a sign of defensive precautions. Crashes and unjustified ou= tput betray their absence.

I commend attention to th= e LangSec movement, which advocates for rigorously enforced separation betw= een legal and illegal inputs.

Doug
--000000000000a0171e0618e25f34--