15 Feb
2016
15 Feb
'16
9:38 p.m.
Hanno Böck hanno@hboeck.de writes:
I did a quick fuzzing test of the command line tools coming with nettle.
echo "]"|sexp-conv will cause an abort call and echo "{MiM}"|sexp-conv causes an assert:
Thanks for the bug report. I'm investigating.
usually abort/assert calls are debugging tools for situations in a software that should never happen on normal operations.
That's my intention too. For invalid invalid input data, the program should terminate with a more-or-less friendly error message, not crash. Assertion failures are always bugs.
Regards, /Niels
--
Niels Möller. PGP-encrypted email is preferred. Keyid C0B98E26.
Internet email is subject to wholesale government surveillance.