[prev in list] [next in list] [prev in thread] [next in thread] 

List:       quanta
Subject:    [Quanta] unwanted pasting of the current file path into my working
From:       Philip Payne <ppayne () acrea81 ! com>
Date:       2007-04-15 11:08:46
Message-ID: 462207BE.2010200 () acrea81 ! com
[Download RAW message or body]

[Attachment #2 (multipart/alternative)]


Hello

I use Quanta for all my web site developments
I have just one problem  and I wonder if anybody is familiar with this ?
If so maybe they could tell me if I am doing something wrong or if its a 
bug and can it be fixed ?

I am plagued by pesky unwanted  recurrent pasting of the current file 
path into my working document, such as:
*
file:///media/samba/MYSERVER/www/SOMESITE/flash/include/spop3.inc*
Etc ...

You can imagine that I have to check all my files very good for this 
before putting them online, its time consuming and is starting to get me 
down!

I am using Debian Testing 64 with Gnome.

I have retraced my steps, I do quite a bit of cut and paste, working 
with php and html code, but I can't  figure how it happens there does 
not seem to be a pattern , I have checked the short cut keys in Quanta 
config but did not see any thing.
I mainly use:
CTRL V
CTRL P
CTRL D
ALT TAB
CTRL TAB
Thats it..
None of these shortcuts cause this..

Thanks for any help.
Philip

quanta-request@mail.kde.org a écrit :
> Send Quanta mailing list submissions to
> 	quanta@mail.kde.org
>
> To subscribe or unsubscribe via the World Wide Web, visit
> 	https://mail.kde.org/mailman/listinfo/quanta
> or, via email, send a message with subject or body 'help' to
> 	quanta-request@mail.kde.org
>
> You can reach the person managing the list at
> 	quanta-owner@mail.kde.org
>
> When replying, please edit your Subject line so it is more specific
> than "Re: Contents of Quanta digest..."
>
>
> Today's Topics:
>
>    1. Help with Quanta+ code (Munawar Hafiz)
>    2. Re: Help with Quanta+ code (Andras Mantia)
>
>
> ----------------------------------------------------------------------
>
> Message: 1
> Date: Sat, 14 Apr 2007 14:21:20 -0500
> From: "Munawar Hafiz" <munawar.uiuc@gmail.com>
> Subject: [Quanta] Help with Quanta+ code
> To: quanta@mail.kde.org
> Message-ID:
> 	<e67423f40704141221s432c1286u9079f95a56529c5c@mail.gmail.com>
> Content-Type: text/plain; charset="iso-8859-1"
>
> Hi,
>
> I am a Ph.D. student at UIUC working with Professor Ralph Johnson. My
> research interest is security and software architecture. At this point, I am
> surveying existing software architecture for buffer overflow vulnerability
> protection.
>
> I need some help understanding the Quanta+ codebase. In particular I have
> three questions.
>
> 1. Does the C/C++ code use the string library functions (strcpy, strcat,
> gets etc)?
>
> 2. Or does it use some sort of buffer bounds checking, either by rewriting
> the string library, or checking before every buffer operation?
>
> 3. Is the bounds checking available from the first release, or it has been
> included in a subsequent release? How did the development team go about
> making this change in the code?
>
>
> Any information would be greatly appreciated. Thanks in advance.
>
> Munawar Hafiz
> UIUC
> https://netfiles.uiuc.edu/mhafiz/www/
> -------------- next part --------------
> An HTML attachment was scrubbed...
> URL: http://mail.kde.org/pipermail/quanta/attachments/20070414/f5b5fd23/attachment.html 
>
> ------------------------------
>
> Message: 2
> Date: Sun, 15 Apr 2007 09:59:44 +0300
> From: Andras Mantia <amantia@kde.org>
> Subject: Re: [Quanta] Help with Quanta+ code
> To: Quanta users list <quanta@mail.kde.org>
> Message-ID: <200704150959.51620.amantia@kde.org>
> Content-Type: text/plain; charset="utf-8"
>
> Hi,
>
> On Saturday 14 April 2007, Munawar Hafiz wrote:
>   
>> I need some help understanding the Quanta+ codebase. In particular I
>> have three questions.
>>
>> 1. Does the C/C++ code use the string library functions (strcpy,
>> strcat, gets etc)?
>>     
>
> No, they are generally avoided in favor of the QString class, which is 
> safer, easier to use and works with unicode internally.
>
>   
>> 2. Or does it use some sort of buffer bounds checking, either by
>> rewriting the string library, or checking before every buffer
>> operation?
>>     
>
> See above.
>
>   
>> 3. Is the bounds checking available from the first release, or it has
>> been included in a subsequent release? How did the development team
>> go about making this change in the code?
>>     
>
> QString was there since always, provided by the Qt library.
> Generally when coding in C++ using the Qt and KDE libraries you don't 
> really have to think about boundary checking. Sure, there are cases 
> when it's not a good idea to access the n+1'd element of an array, but 
> this usually doesn't result in memory corruption, only in an error from 
> the framework (or in certain cases the n+1 element is added to the 
> array).
> For strings there are only a few cases when you have to think about the 
> length of the string.
>
> Andras
>
>   


-- 
Philip Payne
ppayne@acrea81.com
<mailto:ppayne@acrea81.com>www.acrea81.com <http://www.acrea81.com>
05 65 20 01 03
06 74 69 36 41


[Attachment #5 (text/html)]

<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
  <meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type">
  <title></title>
</head>
<body bgcolor="#ffffff" text="#000000">
Hello<br>
<br>
I use Quanta for all my web site developments <br>
I have just one problem&nbsp; and I wonder if anybody is familiar with this ?<br>
If so maybe they could tell me if I am doing something wrong or if its
a bug and can it be fixed ?<br>
<br>
I am plagued by pesky unwanted&nbsp; recurrent pasting of the current file
path into my working document, such as:<br>
<b><br>
<a class="moz-txt-link-freetext" \
href="file:///media/samba/MYSERVER/www/SOMESITE/flash/include/spop3.inc">file:///media/samba/MYSERVER/www/SOMESITE/flash/include/spop3.inc</a></b><br>
 Etc ...<br>
<br>
You can imagine that I have to check all my files very good for this
before putting them online, its time consuming and is starting to get
me down!<br>
<br>
I am using Debian Testing 64 with Gnome.<br>
<br>
I have retraced my steps, I do quite a bit of cut and paste, working
with php and html code, but I can't&nbsp; figure how it happens there does
not seem to be a pattern , I have checked the short cut keys in Quanta
config but did not see any thing.<br>
I mainly use:<br>
CTRL V<br>
CTRL P<br>
CTRL D<br>
ALT TAB<br>
CTRL TAB<br>
Thats it..<br>
None of these shortcuts cause this..<br>
<br>
Thanks for any help.<br>
Philip<br>
<br>
<a class="moz-txt-link-abbreviated" \
href="mailto:quanta-request@mail.kde.org">quanta-request@mail.kde.org</a> a \
&eacute;crit&nbsp;: <blockquote \
cite="midmailman.70.1176631234.23669.quanta@mail.kde.org"  type="cite">
  <pre wrap="">Send Quanta mailing list submissions to
	<a class="moz-txt-link-abbreviated" \
href="mailto:quanta@mail.kde.org">quanta@mail.kde.org</a>

To subscribe or unsubscribe via the World Wide Web, visit
	<a class="moz-txt-link-freetext" \
href="https://mail.kde.org/mailman/listinfo/quanta">https://mail.kde.org/mailman/listinfo/quanta</a>
 or, via email, send a message with subject or body 'help' to
	<a class="moz-txt-link-abbreviated" \
href="mailto:quanta-request@mail.kde.org">quanta-request@mail.kde.org</a>

You can reach the person managing the list at
	<a class="moz-txt-link-abbreviated" \
href="mailto:quanta-owner@mail.kde.org">quanta-owner@mail.kde.org</a>

When replying, please edit your Subject line so it is more specific
than "Re: Contents of Quanta digest..."


Today's Topics:

   1. Help with Quanta+ code (Munawar Hafiz)
   2. Re: Help with Quanta+ code (Andras Mantia)


----------------------------------------------------------------------

Message: 1
Date: Sat, 14 Apr 2007 14:21:20 -0500
From: "Munawar Hafiz" <a class="moz-txt-link-rfc2396E" \
                href="mailto:munawar.uiuc@gmail.com">&lt;munawar.uiuc@gmail.com&gt;</a>
                
Subject: [Quanta] Help with Quanta+ code
To: <a class="moz-txt-link-abbreviated" \
href="mailto:quanta@mail.kde.org">quanta@mail.kde.org</a> Message-ID:
	<a class="moz-txt-link-rfc2396E" \
href="mailto:e67423f40704141221s432c1286u9079f95a56529c5c@mail.gmail.com">&lt;e67423f40704141221s432c1286u9079f95a56529c5c@mail.gmail.com&gt;</a>
                
Content-Type: text/plain; charset="iso-8859-1"

Hi,

I am a Ph.D. student at UIUC working with Professor Ralph Johnson. My
research interest is security and software architecture. At this point, I am
surveying existing software architecture for buffer overflow vulnerability
protection.

I need some help understanding the Quanta+ codebase. In particular I have
three questions.

1. Does the C/C++ code use the string library functions (strcpy, strcat,
gets etc)?

2. Or does it use some sort of buffer bounds checking, either by rewriting
the string library, or checking before every buffer operation?

3. Is the bounds checking available from the first release, or it has been
included in a subsequent release? How did the development team go about
making this change in the code?


Any information would be greatly appreciated. Thanks in advance.

Munawar Hafiz
UIUC
<a class="moz-txt-link-freetext" \
href="https://netfiles.uiuc.edu/mhafiz/www/">https://netfiles.uiuc.edu/mhafiz/www/</a>
                
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <a class="moz-txt-link-freetext" \
href="http://mail.kde.org/pipermail/quanta/attachments/20070414/f5b5fd23/attachment.ht \
ml">http://mail.kde.org/pipermail/quanta/attachments/20070414/f5b5fd23/attachment.html</a> \


------------------------------

Message: 2
Date: Sun, 15 Apr 2007 09:59:44 +0300
From: Andras Mantia <a class="moz-txt-link-rfc2396E" \
                href="mailto:amantia@kde.org">&lt;amantia@kde.org&gt;</a>
Subject: Re: [Quanta] Help with Quanta+ code
To: Quanta users list <a class="moz-txt-link-rfc2396E" \
                href="mailto:quanta@mail.kde.org">&lt;quanta@mail.kde.org&gt;</a>
Message-ID: <a class="moz-txt-link-rfc2396E" \
href="mailto:200704150959.51620.amantia@kde.org">&lt;200704150959.51620.amantia@kde.org&gt;</a>
                
Content-Type: text/plain; charset="utf-8"

Hi,

On Saturday 14 April 2007, Munawar Hafiz wrote:
  </pre>
  <blockquote type="cite">
    <pre wrap="">I need some help understanding the Quanta+ codebase. In particular I
have three questions.

1. Does the C/C++ code use the string library functions (strcpy,
strcat, gets etc)?
    </pre>
  </blockquote>
  <pre wrap=""><!---->
No, they are generally avoided in favor of the QString class, which is 
safer, easier to use and works with unicode internally.

  </pre>
  <blockquote type="cite">
    <pre wrap="">2. Or does it use some sort of buffer bounds checking, either by
rewriting the string library, or checking before every buffer
operation?
    </pre>
  </blockquote>
  <pre wrap=""><!---->
See above.

  </pre>
  <blockquote type="cite">
    <pre wrap="">3. Is the bounds checking available from the first release, or it \
has been included in a subsequent release? How did the development team
go about making this change in the code?
    </pre>
  </blockquote>
  <pre wrap=""><!---->
QString was there since always, provided by the Qt library.
Generally when coding in C++ using the Qt and KDE libraries you don't 
really have to think about boundary checking. Sure, there are cases 
when it's not a good idea to access the n+1'd element of an array, but 
this usually doesn't result in memory corruption, only in an error from 
the framework (or in certain cases the n+1 element is added to the 
array).
For strings there are only a few cases when you have to think about the 
length of the string.

Andras

  </pre>
</blockquote>
<br>
<br>
<div class="moz-signature">-- <br>
<title></title>
<link rel="stylesheet" type="text/css"
 href="http://www.acrea81.com/css/style.css">
<meta http-equiv="Content-Type" content="text/html; ">
<table class="textmail" align="left" border="0" cellpadding="2"
 cellspacing="2" width="250">
  <tbody>
    <tr>
      <td><span class="textmail">Philip Payne</span><br>
      <a href="mailto:ppayne@acrea81.com">ppayne@acrea81.com<br>
      </a><a href="http://www.acrea81.com">www.acrea81.com</a><br>
      <span class="textmail">05 65 20 01 03<br>
06 74 69 36 41</span>
      </td>
    </tr>
  </tbody>
</table>
</div>
</body>
</html>



_______________________________________________
Quanta mailing list
Quanta@mail.kde.org
https://mail.kde.org/mailman/listinfo/quanta


[prev in list] [next in list] [prev in thread] [next in thread] 

Configure | About | News | Add a list | Sponsored by KoreLogic