On Thu, Apr 22, 2010 at 3:34 PM, Binyamin Dissen <bdis...@dissensoftware.com > wrote:
> On Thu, 22 Apr 2010 15:07:52 +0100 Sam Siegel <s...@pscsi.net> wrote: > > :>I'm trying to write some authorized code that has a requirement to invoke > :>unauthorized user exits. > > Why? What is the business case? > > :>I'd like to be able to do the following. > > :>1) Provide an anchor word so that the user exit can allocate and retain > :>memory from call to call. > > No problem. > > :>2) Pass a buffer of data (or the address of the buffer) to the user exit > so > :>that the user exit can modify the data. > > Also, no problem. > > :>3) Allow the user exit to pass the address of data it has generated back > to > :>the authorized caller. > > You must ensure that the unauthorized code has access to the storage > provided. > One way is to use MVCK/MVCSK when copying it to your buffers. > > :>3.1) Data in item 3 will most likely be in a different buffer than data > in > :>item 2. > > :>Pointers (with enough detail please so I can do the research) on how to > do > :>this and maintain system integrity will be greatly appreciated. > > The first issue - is the authorized caller an SVC or a program? > > As stated previously, the latter case involves a lot more work. You must > make > sure that APF is not on when the unauthorized program is called and all > storage used by the authorized code, including the programs, are in system > key > storage. That includes the initiators save area - you cannot restore from > it. > Thanks also. Need some time to study this and do some tests. > > -- > Binyamin Dissen <bdis...@dissensoftware.com> > http://www.dissensoftware.com > > Director, Dissen Software, Bar & Grill - Israel > > > Should you use the mailblocks package and expect a response from me, > you should preauthorize the dissensoftware.com domain. > > I very rarely bother responding to challenge/response systems, > especially those from irresponsible companies. > > ---------------------------------------------------------------------- > For IBM-MAIN subscribe / signoff / archive access instructions, > send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO > Search the archives at http://bama.ua.edu/archives/ibm-main.html > ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
