On 22 April 2010 10:46, Sam Siegel <[email protected]> wrote:
> On Thu, Apr 22, 2010 at 3:39 PM, Bob Shannon 
> <[email protected]>wrote:
>
>> >I'm trying to write some authorized code that has a requirement to invoke
>> >unauthorized user exits.
>>
>> Use SYNCH. Assume all data received from the exit is untrusted and insure
>> the caller verifies it. Caller can save addresses on behalf of the exit.
>>
>
> SYNCH was previously suggested and I'm using it.
>
> To verify data my intention is to use VSMLOC.

TOCTTOU!

Tony H.

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [email protected] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Reply via email to