Chris Palmer comments

Results 10 comments of


                                            Chris Palmer

sys/fuchsia: add the mtrace system call

Landing this one first will minimally allow us to use `zx_resource` in other PRs. I don't know what the race test failure means. Clues?

docs/fuchsia: building without cleaning

LGTM, thanks. :)

sys/fuchsia: blank lines between comments and declarations

ci/aux is failing because the format of "Merge branch 'master' into update-sys-fuchsia-readme" doesn't fit the standard, but I don't see a way to fix that. Any clues?

`is` is sometimes incorrect because `==` does not work for floating-point comparison in C

Yes, I know that floating-point errors are expected. The trouble is that there is no way to detect or deal with them *in terms of fe source code and in...

A variety of minor cleanups

Thanks! I've incorporated your suggestions.

pkg/build: add build command for starnix

No problem. :) I did read it tho! :)

Consider a blocklist for schemes instead of a safelist

If we intend for the list to be an actual security mechanism, then only a safelist can act as such. Anything less, such as a blocklist or lexical sniff-test (e.g....

Unrecognized literal c""

I'm having the same problem, but on a file that does not contain `c""` or `cr""` (!). Here's the end of my stack trace: ``` Finished dev [unoptimized + debuginfo]...

New check: Include info about the ratio of memory-unsafe to memory-safe code

Especially for software that has easy-to-reach attack surface, its arguably the single most important consideration. A scorecard rating for (for example) a web server that doesn't mention that the product...

Security Considerations section notes

Also, add: "User agents MUST make WebSerial available *only* to [Secure Contexts](https://www.w3.org/TR/secure-contexts/)."