As someone noted here recently the specifications for mondo are 
wonderful.

Unfortunately, I think the implementation needs some attention. The C 
source code is full of system() calls, strcpy() is much used. Bits of 
code such as this bother me a little:


              flag_set[opt]=TRUE;
              if (optarg) { strcpy(flag_val[opt], optarg); }


The source field is user-supplied and is not validated wrt length.

It sorely needs a code audit. If there's anyone listening who'd like a 
decent low-end backup/recovery and fancies they have the skills to 
improve the code quality, this is a tool that needs your attention.


Before anyone says, "But there's Amanda," mondo does things now that 
are on Amanda's todo list. Like CD burning. Like multivolume. I checked 
Amanda.


Mondo is at http://www.microwerks.net/~hugo/ and there's at least one 
mailing list. There's a project for it at sourceforge, but its website 
there isn't populated yet.




-- 
Cheers
John Summerfield

Microsoft's most solid OS: http://www.geocities.com/rcwoolley/

Note: mail delivered to me is deemed to be intended for me, for my 
disposition.





_______________________________________________
Redhat-devel-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-devel-list

Reply via email to