Re: Rant - Emacs mail is not user friendly

[Stefan Monnier]

>> That's nice, but some security bugs strike even when faced with
>> a correct/valid JPG file.  What we need to validate is the libjpeg code,
>> not the JPG files.
> No, you need to validate both.

Depends on what you mean by "validate the code".  In my line of work,
a code is not validated if it can fail on some input.  I.e. validation
of the code includes checking that the code does the proper validation
of the data it receives.


        Stefan