Simon Josefsson wrote: > >> But that seems a bit fragile. > > > > Please come up with an attack that is not defended against. > > My argument was about complexity -- sometimes it is worth defending > against an entire class of attack that is theoretical if the price for > the defence is low. > > Anything involving searching file paths, environment variables and > reading files that could be malicious -- and glibc 1998-era code :) -- > may be concerns.
Sure, there's a compromise to make between features and complexity. Some distros (like OpenBSD, IIRC) build all their packages with --disable-nls. This reduces the complexity. But, of course, such a distro cannot be recommended to an average user who may not master English. Bruno
