• Open Menu Close Menu
  • Apple
  • Shopping Bag
  • Apple
  • Mac
  • iPad
  • iPhone
  • Watch
  • TV
  • Music
  • Support
  • Search apple.com
  • Shopping Bag

Lists

Open Menu Close Menu
  • Terms and Conditions
  • Lists hosted on this site
  • Email the Postmaster
  • Tips for posting to public mailing lists
Re: Robustness of CoreData against malicious documents?
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Robustness of CoreData against malicious documents?


  • Subject: Re: Robustness of CoreData against malicious documents?
  • From: Jim Correia <email@hidden>
  • Date: Tue, 4 Apr 2006 15:31:00 -0400

On Apr 4, 2006, at 3:18 PM, Cem Karan wrote:

On Apr 4, 2006, at 2:52 PM, Jim Correia wrote:

How do I set this?

http://gemma.apple.com/documentation/Cocoa/Reference/CoreData_ObjC/ Classes/NSPersistentStoreCoord.html


And can it handle maliciously malformed data?

I don't know - I didn't write Core Data :-)

(e.g., data that someone hand-crafted and passed to my app in the hopes of getting it to break and execute code rather than just parse data)

Is this really a legitimate concern? Are you accepting input for your coredata app on a publicly accessible server? Or is this just an "ordinary" desktop application?


Of all the possible attack vectors, I'm wondering why you are fixated on this particular one.

Jim
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Cocoa-dev mailing list      (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden


References: 
 >Robustness of CoreData against malicious documents? (From: Cem Karan <email@hidden>)
 >Re: Robustness of CoreData against malicious documents? (From: glenn andreas <email@hidden>)
 >Re: Robustness of CoreData against malicious documents? (From: Cem Karan <email@hidden>)
 >Re: Robustness of CoreData against malicious documents? (From: William Bumgarner <email@hidden>)
 >Re: Robustness of CoreData against malicious documents? (From: Cem Karan <email@hidden>)
 >Re: Robustness of CoreData against malicious documents? (From: Jim Correia <email@hidden>)
 >Re: Robustness of CoreData against malicious documents? (From: Cem Karan <email@hidden>)

  • Prev by Date: Re: Scared by implicit use of 'description' in bindings
  • Next by Date: Re: Displaying date in Core Data application
  • Previous by thread: Re: Robustness of CoreData against malicious documents?
  • Next by thread: Re: Robustness of CoreData against malicious documents?
  • Index(es):
    • Date
    • Thread