Compile time executable calling?

Timothee Cour thelastmammoth at gmail.com
Sun Jul 14 18:26:24 PDT 2013


On Fri, Jul 12, 2013 at 9:23 PM, Walter Bright
<newshound2 at digitalmars.com>wrote:

> On 7/12/2013 5:00 PM, Timothee Cour wrote:
>
>> Let's put it another way: if I or someone else made a pull request for
>> CTFE
>> "exec", would it have a chance of being accepted?
>>
>
> A big problem with it would be the equivalent of the "SQL Injection
> Exploit". Since the compiler can now execute arbitrary code, someone
> passing around malicious source code could do anything to your system.
>
>
Which is why I suggested in my first post above that it should be enabled
by a compiler switch (eg: dmd -enable_exec) for safety reasons (just as
string import requires -J).
At the very least it is useful for debugging personal projects.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.puremagic.com/pipermail/digitalmars-d/attachments/20130714/dd6e34f8/attachment.html>


More information about the Digitalmars-d mailing list