Re: unreliability

Inizio della pagina
Delete this message
Reply to this message
Autore: D. J. Bernstein
Data:  
To: exim-users
Oggetto: Re: unreliability
The function spool_out.c:spool_write_header() creates a temporary file
and then moves it to a permanent location. At that moment, the file is
GARBAGE. If the system crashes, you cannot trust anything in that file.

The function spool_in.c:spool_read_header() uses that file to find out
various important facts, such as the message's list of recipients. Its
information is thus GARBAGE.

> (Boy, it's like trying to get blood out of a stone !


This is ridiculous. Reliability (like security) isn't a game of ``Gee,
I don't _know_ any problems, so it's okay.'' If you didn't design your
system from the start to be reliable, you have no business using it to
transport anybody's mail.

---Dan