Re: unreliability

Página superior
Eliminar este mensaje
Responder a este mensaje
Autor: D. J. Bernstein
Fecha:  
A: exim-users
Asunto: Re: unreliability
The function spool_out.c:spool_write_header() creates a temporary file
and then moves it to a permanent location. At that moment, the file is
GARBAGE. If the system crashes, you cannot trust anything in that file.

The function spool_in.c:spool_read_header() uses that file to find out
various important facts, such as the message's list of recipients. Its
information is thus GARBAGE.

> (Boy, it's like trying to get blood out of a stone !


This is ridiculous. Reliability (like security) isn't a game of ``Gee,
I don't _know_ any problems, so it's okay.'' If you didn't design your
system from the start to be reliable, you have no business using it to
transport anybody's mail.

---Dan