English version
Accueil     À propos     Téléchargement     Ressources     Contactez-nous    

Ce site est rarement mis à jour. Pour les informations les plus récentes, rendez-vous sur le nouveau site OCaml à l'adresse ocaml.org.

Browse thread
Safe marshall?
[ Home ] [ Index: by date | by threads ]
[ Search: ]

[ Message by date: previous | next ] [ Message in thread: previous | next ] [ Thread: previous | next ]
Date: 2005-02-16 (22:55)
From: Oliver Bandel <oliver@f...>
Subject: Re: [Caml-list] Safe marshall?
On Wed, Feb 16, 2005 at 05:07:55PM -0500, Mike Hamburg wrote:
> Is there any way to call Marshall in a type-safe way?  I need to use 
> marshaling for a networking program, and I'd rather not leave Marshal 
> as an arbitrary code execution vulnerability (which it is as far as I 
> can tell: switching on a Marshaled value should produce a computed 
> jump, which can be set by an attacker to point to an arbitrary place).  
> Am I stuck writing my own marshal function?

Is it possible to say a C-function *anything* about a datastructure's structure?
Via the C-interface of OCaml?!

If so.... at least under Mac OS-X it should be possible to solve that task
with Objective-C. It can dump objects completely.

So this -  at least on this platform - would be possible then.

But IMHO this may not be possible with all Objective-C implementations.