X-Authentication-Warning:	delorie.com: mail set sender to geda-user-bounces using -f
X-Recipient:	geda-user AT delorie DOT com
X-Virus-Scanned:	amavisd-new at neurotica.com
Message-ID:	<50A93E51.7030505@neurotica.com>
Date:	Sun, 18 Nov 2012 15:00:17 -0500
From:	Dave McGuire <mcguire AT neurotica DOT com>
User-Agent:	Mozilla/5.0 (X11; Linux x86_64; rv:16.0) Gecko/20121028 Thunderbird/16.0.2
MIME-Version:	1.0
To:	geda-user AT delorie DOT com
Subject:	Re: Scheme, was Re: [geda-user] Thoughts on gschem UI
References:	<50A688B8 DOT 4090809 AT neurotica DOT com> <CC923058-B962-45B5-973D-EA03906430B9 AT noqsi DOT com> <50A6A265 DOT 6050300 AT neurotica DOT com> <4E8E6F31-EF8D-4540-BA86-7935C1C3E6D8 AT noqsi DOT com> <50A6A95C DOT 5030903 AT neurotica DOT com> <355DEF4F-51BB-44A8-A5F4-D8564E7E7885 AT noqsi DOT com> <20121116213601 DOT 13718 DOT qmail AT stuge DOT se> <66889AAB-3A82-4861-ACB0-B35A876EF6F4 AT noqsi DOT com> <CAC4O8c8s3837dD5so1hu-QOm8PW69sehVNNX7njQvnRGzXODGw AT mail DOT gmail DOT com> <B63F900B-2C12-48A4-AD4B-5A616078030B AT noqsi DOT com> <CAC4O8c9BAJe8_7KLL8aaGq30HCkj+q74DB9jywXRXogJzdqNzw AT mail DOT gmail DOT com> <50A83AAA DOT 6060500 AT jump-ing DOT de> <B1A7C9C1-5EAE-49AB-A03A-D5D4AFD3B0C0 AT noqsi DOT com> <50A8615E DOT 2080800 AT neurotica DOT com> <05730E0F-4DA1-47C8-80BB-5D4F37EFD94E AT noqsi DOT com> <50A8675D DOT 30509 AT neurotica DOT com> <CAM2RGhQ7aZf_yiOw4ibKTe5RnH7p8W50Maqo1YrVnLbJuhX-1Q AT mail DOT gmail DOT com> <F9FB3DFD-3D4D-4744-81E8-172D48E96FE0 AT noqsi DOT com> <50A90E3B DOT 6090203 AT neurotica DOT com> <CAPYb0EE6ZrdDx4Jy=4dZ=RBi8Ax13ijwk3M+DAkoOT+0WqakfQ AT mail DOT gmail DOT com>
In-Reply-To:	<CAPYb0EE6ZrdDx4Jy=4dZ=RBi8Ax13ijwk3M+DAkoOT+0WqakfQ@mail.gmail.com>
X-Enigmail-Version:	1.4.5
Reply-To:	geda-user AT delorie DOT com

On 11/18/2012 02:54 PM, Bob Paddock wrote:
>>   The one comment I will make about the use of Guile in gschem is in the
>> context of config files.  Config files should not be executable
>> programs.
> 
> That was not fixed a long time ago (I pay more attention to PCB than
> the rest of the tools)?

  This is gschem, not PCB.

> I know there was a bug report filed on it and
> some work done due that being a security risk.  "Config files should
> be parsed, not executed".

  Perhaps they're just parsed, but they still appear to be Scheme code.

             -Dave

-- 
Dave McGuire, AK4HZ
New Kensington, PA

- Raw text -