#5269: RTS flag decoding broken
-----------------------------+----------------------------------------------
Reporter: augustss | Owner:
Type: bug | Status: closed
Priority: normal | Milestone:
Component: Runtime System | Version: 7.0.4
Resolution: wontfix | Keywords:
Testcase: | Blockedby:
Difficulty: | Os: Unknown/Multiple
Blocking: | Architecture: Unknown/Multiple
Failure: None/Unknown |
-----------------------------+----------------------------------------------
Changes (by simonmar):
* status: new => closed
* resolution: => wontfix
Comment:
I sympathise. But the basic problem is that when used as a CGI script,
the command-line arguments come from an untrusted source, and most people
wouldn't know that they need to use `-no-rtsopts` with CGI. Furthermore
the consequences could be disastrous, so I don't think we had much choice
here - placing the responsibility on the user to close a security hole
explicitly with an obscure flag is just wrong.
See also #3910.
--
Ticket URL: <http://hackage.haskell.org/trac/ghc/ticket/5269#comment:2>
GHC <http://www.haskell.org/ghc/>
The Glasgow Haskell Compiler
_______________________________________________
Glasgow-haskell-bugs mailing list
Glasgow-haskell-bugs@haskell.org
http://www.haskell.org/mailman/listinfo/glasgow-haskell-bugs
