Re: Fixing security vulnerabilities before new releases

> (And I'm not sure I agree that a shorthand which shortens the symbol's
> name is necessarily safe.)

It's definitely not "necessarily safe".  It just makes it a bit harder
to use holes.

E.g. my sample exploit which redirects `vc-cvs-registered` to `load`
would be rejected but it might still be possible to exploit it by using
another function with a long enough name that does something similarly
dangerous.


=== Stefan