Re: CVS update: subversion STACK

gstein@tigris.org writes:
> + - security checks (e.g. system() usage in wc/get_editor)

And in log.c, now. (Thanks for noticing, Greg.)

We may just want to internalize diff/patch functionality, for speed
and security, eventually.

But while we're driving them as external programs, we'll need to give
the user a way to specify (at build-time, overrideable at run-time)
exactly which program gets run, of course.

That's something I'm putting off until after the basic merge
functionality is working, but if someone jumps in and adds the code
that's fine too.

Is system() a security risk beyond this, and if so how should we drive
external programs?

-Karl
Received on Sat Oct 21 14:36:14 2006