From mboxrd@z Thu Jan  1 00:00:00 1970
X-Spam-Checker-Version: SpamAssassin 3.4.4 (2020-01-24) on polar.synack.me
X-Spam-Level: 
X-Spam-Status: No, score=-1.9 required=5.0 tests=BAYES_00
	autolearn=unavailable autolearn_force=no version=3.4.4
Path: 
 eternal-september.org!reader01.eternal-september.org!reader02.eternal-september.org!.POSTED!not-for-mail
From: Paul Rubin <no.email@nospam.invalid>
Newsgroups: comp.lang.ada
Subject: Re: How to get Ada to ?cross the chasm??
Date: Tue, 08 May 2018 02:03:32 -0700
Organization: A noiseless patient Spider
Message-ID: <87603yy0wr.fsf@nightsong.com>
References: <1c73f159-eae4-4ae7-a348-03964b007197@googlegroups.com>
	<87in8buttb.fsf@jacob-sparre.dk> <87wowqpowu.fsf@nightsong.com>
	<16406268-83df-4564-8855-9bd0fe9caac0@googlegroups.com>
	<87o9i2pkcr.fsf@nightsong.com> <pc8l7e$km5$1@franka.jacob-sparre.dk>
	<87in88m43h.fsf@nightsong.com>
	<cd866ee8-ad4d-489e-a38b-d8e5f5d4af00@googlegroups.com>
	<87efiuope8.fsf@nightsong.com>
	<322f9b26-01de-4753-bb50-6ef2f3d993d8@googlegroups.com>
	<87a7th9pd1.fsf@nightsong.com>
	<bbda04b9-0f91-47c5-9193-279b667f503c@googlegroups.com>
	<87h8no1nli.fsf@nightsong.com>
	<f778e764-facc-47b5-896c-fc01d7a3bdbe@googlegroups.com>
	<87po2cyty7.fsf@nightsong.com> <87bmdwhwob.fsf@nightsong.com>
	<6746d7d1-406e-4891-8293-9424aed76215@googlegroups.com>
	<877eoezy6e.fsf@nightsong.com>
	<b2dba7b7-1ca3-458a-826e-e24162f54dc8@googlegroups.com>
	<87y3gun1ha.fsf@nightsong.com>
	<ec04ab22-6316-48d3-bdab-eae1c768c4e0@googlegroups.com>
Mime-Version: 1.0
Content-Type: text/plain
Injection-Info: reader02.eternal-september.org;
 posting-host="52b5ce8581a197e35f17678a348070d7";
	logging-data="31759"; mail-complaints-to="abuse@eternal-september.org";
	posting-account="U2FsdGVkX19rep8qVZeDCAx8sTeUhytJ"
User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/25.3 (gnu/linux)
Cancel-Lock: sha1:B/yQmczU671DqQSkAJpHyeww8uo=
	sha1:F2MbC6TbLawST1W+aCGje6f05HQ=
Xref: reader02.eternal-september.org comp.lang.ada:52098
Date: 2018-05-08T02:03:32-07:00
List-Id: <comp.lang.ada>

gautier_niouzes@hotmail.com writes:
> It's corrected in rev. r622:
> https://sourceforge.net/p/unzip-ada/code/622/

This is weird, when I clicked the "download" button it gave me
zipada53.zip.  Is that an obsolete version?  I did an svn checkout and
got the current version (629) which built ok with gprbuild.  It's late
here so I'll test it some other time.

The revision 622 comment says "regressed 'Image to pre-Ada-2012 form,
for pleasing gcc version 5.4.0 20160609".  But I'm using the default
GNAT with Debian 9 and that seems to use gcc6.  Is that supposed to
support Ada 2012?  I thought last time I played with it, I was able to
use Ada 2012 features.

> There is no match because I've programmed the MA part of LZMA from
> scratch.  My version is less sophisticated than the original.

Oh hmm, it would be REALLY useful to have a safe replacement for the
historically buggy 7z and maybe by extension xz.  

> Actually there are probably still obvious bugs waiting around....

If they are subscript overruns that trigger constraint error exceptions
in the Ada code and crash the program, that's still much safer than the
C behaviour of allowing malicious code injection, so it's a huge
improvement.  Going past that calls for using SPARK to show the absence
of subscript and int overflow errors, which might or might not be on
your radar.  Even further (and probably a lot harder) would be SPARK
verification that compressing something and uncompressing it restores
the original input.

>   https://blog.adacore.com/running-american-fuzzy-lop-on-your-ada-code

Oh this is great, I had been wondering whether AFL could be used with
Ada.  It is important.  Thanks.