On Fri, 22 Jun 2018 at 23:08, Ze'ev Atlas via Pcre-dev
<[email protected]> wrote:
>
> PhilIt might be a good idea to add some id in the serialized object that 
> stores the PCRE2 version and than, any subsequent version would be able to 
> decide whether it is compatible or not.

Isn't this already being done?

In pcre2_serialize.c a magic number (to detect endianess?), the PCRE2
version and some other info (code unit size, pointer size, PCRE2_SIZE)
are saved in the serialized data, and checked back upon loading.

Orthogonal question: is that the amount of information sufficient to
protect against decoding of trusted data, but on the wrong OS / PCRE
installation / etc.?

Cheers,
-- 
Giuseppe D'Angelo

-- 
## List details at https://lists.exim.org/mailman/listinfo/pcre-dev 

Reply via email to