[slime-devel] Re: [PATCH] Bind *read-eval* in slime-version-string

Madhu enometh at meer.net
Tue Apr 22 01:19:08 UTC 2008

* Zach Beane <m37ierik0t.fsf at unnamed.xach.com> :
Wrote on Mon, 21 Apr 2008 06:23:30 -0400:
|> Besides, not only is it not complicating things, it is The Right Thing
|> To Do.
| I don't think you should stop there. There is a dangerous file named
| swank.lisp that is loaded by the lisp and slime.el is loaded by
| emacs. An attacker thwarted by your ChangeLog fix could still modify
| any of those files and take over your computer when you start slime!

See <URL:http://permalink.gmane.org/gmane.lisp.slime.devel/7300>
upthread in this thread where I explained why swank.lisp and slime.el
are not a problem.


More information about the slime-devel mailing list