Re: Rant - Emacs mail is not user friendly

[Stephen J. Turnbull]

Stefan Monnier writes:

 > That's nice, but some security bugs strike even when faced with
 > a correct/valid JPG file.  What we need to validate is the libjpeg code,
 > not the JPG files.

No, you need to validate both.  If the input is invalid, anything can
happen.  Viz, X.org, whose libraries do no validation at all (and
whose restrictions are typically undocumented)!