HEADS DOWN

[Poul-Henning Kamp]

In message <20070512153532.GQ21795 at elvis.mu.org>, Alfred Perlstein writes:
>* Robert Watson <rwatson at FreeBSD.org> [070512 08:11] wrote:
>> 
>> 
>> Actually, I'm not convinced that crashing the program isn't the right 
>> answer. If an application corrupts memory managed by libc or other 
>> libraries, crashing is generally considered an entirely acceptable failure 
>> mode.
>
>Phk malloc has said otherwise for the past ... 10 years?
>
>I like how phk malloc has it as an option.

But notice that it is not an option for programs that runs as root
or setuid/setgid etc.

Given the hostility of networks, I would support a more hardcore
attitude to memory mismanagement these days.

-- 
Poul-Henning Kamp       | UNIX since Zilog Zeus 3.20
phk at FreeBSD.ORG         | TCP/IP since RFC 956
FreeBSD committer       | BSD since 4.3-tahoe    
Never attribute to malice what can adequately be explained by incompetence.