Re: [Ethereal-dev] Preparing for 1.0

[Gerald Combs <gerald@xxxxxxxxxxxx>]

Michael Tuexen wrote:
> Just a question regarding the last point:
>>> Designate a set of dissectors as "known safe"?
> 
> What are the requirements for such dissectors and what are the
> consequences?

I don't know that the requirements were ever settled on.  It was
suggested a while back that dissectors be categorized for security to
benefit users and to encourage developers to write more secure code:

  http://www.ethereal.com/lists/ethereal-dev/200502/msg00195.html

There are several ways to categorize dissectors, such as formal audits,
past performance, or automated test scores.  The consequences are that
Ethereal might ship with fewer features out of the box, requiring the
user to enable those features automatically.