Re: [racket] Is (read) safe?

2013-03-08 Thread Eli Barzilay
10 minutes ago, Michael Wilber wrote: > With all these discussions about serialization safety in different > languages (see http://news.ycombinator.com/item?id=5343704 for some > commentary on clojure's default reader for example), I have to wonder: > > 1. Is racket's (read) "safe" to use in an un

Re: [racket] Is (read) safe?

2013-03-08 Thread Robby Findler
I think the only thing they can do with that program is run it out of memory (unless there is a bug). All such code execution things built into read are, by default, disabled. You can avoid running out of memory with either custodian memory limits, or by just using the sandbox library. Robby On

[racket] Is (read) safe?

2013-03-08 Thread Michael Wilber
With all these discussions about serialization safety in different languages (see http://news.ycombinator.com/item?id=5343704 for some commentary on clojure's default reader for example), I have to wonder: 1. Is racket's (read) "safe" to use in an unsafe context? 2. If not, how can I (read) a valu