• Open Menu Close Menu
  • Apple
  • Shopping Bag
  • Apple
  • Mac
  • iPad
  • iPhone
  • Watch
  • TV
  • Music
  • Support
  • Search apple.com
  • Shopping Bag

Lists

Open Menu Close Menu
  • Terms and Conditions
  • Lists hosted on this site
  • Email the Postmaster
  • Tips for posting to public mailing lists
Re: How to recognize mutability?
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: How to recognize mutability?


  • Subject: Re: How to recognize mutability?
  • From: "Gerriet M. Denkmann" <email@hidden>
  • Date: Thu, 21 Feb 2013 12:31:08 +0700

On 21 Feb 2013, at 12:09, Jens Alfke <email@hidden> wrote:

>
> On Feb 20, 2013, at 8:39 PM, Gerriet M. Denkmann <email@hidden> wrote:
>
>> They are using $null to stand for nil. Which does not play nice with NSArrays (and other containers), which cannot contain nil.
>
> Plus, the object @“$null” is not the same as a nil pointer, so this is bad whether or not a container can contain nil.
>
> This makes NSArchiver
no: NSArchiver is ok (though kind of frowned upon) NSKeyedArchiver is the silly one.
> a bad idea for _any_ data structure that can contain user (or worse, remote) input, since things will presumably start to break if the user enters “$null” into the right fields. (This makes me want to start entering that into various text fields in apps to see what will happen…) :-p
Just make a nib (or xib) file with some label or button title of $null and see what happens.

>
> — there’s probably a way to use it to pwn some Mac or iOS software, if a creative enough hacker gets ahold of it.

I am not so sure. I have only noticed that NSKeyedUnarchiver turns arrays with $null into empty arrays. (And dictionaries, which have  their keys and values stored as two arrays turn out to have a mismatch between number of keys and values).

But another bug looks rather promising: feed strings with illegal Unicode to NSArchiver and see what happens.
Did this (by accident) the other day. NSArchiver did not return, there was no exception, the app did not crash. Not sure what was going on.

Kind regards,

Gerriet.





_______________________________________________

Cocoa-dev mailing list (email@hidden)

Please do not post admin requests or moderator comments to the list.
Contact the moderators at cocoa-dev-admins(at)lists.apple.com

Help/Unsubscribe/Update your Subscription:

This email sent to email@hidden


  • Follow-Ups:
    • Re: How to recognize mutability?
      • From: Jens Alfke <email@hidden>
References: 
 >Re: How to recognize mutability? (From: "Gerriet M. Denkmann" <email@hidden>)
 >Re: How to recognize mutability? (From: Jens Alfke <email@hidden>)
 >Re: How to recognize mutability? (From: "Gerriet M. Denkmann" <email@hidden>)
 >Re: How to recognize mutability? (From: Jens Alfke <email@hidden>)

  • Prev by Date: Re: How to recognize mutability?
  • Next by Date: Re: How to recognize mutability?
  • Previous by thread: Re: How to recognize mutability?
  • Next by thread: Re: How to recognize mutability?
  • Index(es):
    • Date
    • Thread