OK, but as far as I can see (I'm not a skilled C-programmer), removing the embedded functions from owhttpd and owfs is quite extensive. 3 or 4 new arguments has to be added to dirfunc() so that output file descriptor and other things can be passed.
I don't know if this is the right way to fix the problem? Any suggestions?? Jan B. On Fri, April 14, 2006 15:58, Wim Heirman wrote: > From http://www.manoverboard.org/weblog/fritza/StepintoXcode/ : > > """ > Embedded functions are now prohibited because gcc implemented them by > pushing the code onto the stack, and executing them there. Many security > exploits work by executing code injected into the stack, and it is a > prudent security measure to make the stack non-executable, even at the > expense of embedded functions. > """ > > The newer kernels already refuse to start a thread with code located on > the stack (which is what the problem was with owserver), a few GCC > versions from now the embedded functions will probably not even compile > anymore... > > Regards, > Wim. > > > Paul Alfille wrote: >> Well, it looks like we should just get rid of the embedded functions. If >> it breaks Fedora 5, I'm sure we'll get problems on other platforms from >> time to time. >> >> Paul >> >> On 4/14/06, * Jan Bertelsen* <[EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]>> >> wrote: >> >> It seems that I'm having the same problem with embedded functions as >> Wim >> ([Owfs-developers] owserver segfaulting on startup). >> >> Im running ow on a Fedora Core 5 and it's seg-faulting all the time. >> And >> yes, it's running kernel 2.6.16 On FC4 all was working. >> >> owserver seems to be working now, but owfs and owhttpd fails when >> they >> call a embedded function like dirfunc in ow_dir.c and >> owhttpd_handler.c >> >> I'm wondering if there is a special "security-function" in FC5 which >> don't like embedded functions. Could it be SELinux? Or maybe a >> missing >> compiler option?? >> >> Any ide?? >> >> /Jan >> >> >> >> >> >> >> >> >> >> >> ------------------------------------------------------- >> This SF.Net email is sponsored by xPML, a groundbreaking scripting >> language >> that extends applications into web and mobile media. Attend the live >> webcast >> and join the prime developer group breaking into this new coding >> territory! >> http://sel.as-us.falkag.net/sel?cmd=lnk&kid=110944&bid=241720&dat=121642 >> >> <http://sel.as-us.falkag.net/sel?cmd=lnk&kid=110944&bid=241720&dat=121642> >> _______________________________________________ >> Owfs-developers mailing list >> [email protected] >> <mailto:[email protected]> >> https://lists.sourceforge.net/lists/listinfo/owfs-developers >> >> > > -- > ir. Wim Heirman, > ELIS Department, Ghent University, Belgium > Phone: +32-9-264.95.27 > E-mail: [EMAIL PROTECTED] > http://www.elis.UGent.be/~wheirman/ > > > ------------------------------------------------------- > This SF.Net email is sponsored by xPML, a groundbreaking scripting > language > that extends applications into web and mobile media. Attend the live > webcast > and join the prime developer group breaking into this new coding > territory! > http://sel.as-us.falkag.net/sel?cmd=lnk&kid=110944&bid=241720&dat=121642 > _______________________________________________ > Owfs-developers mailing list > [email protected] > https://lists.sourceforge.net/lists/listinfo/owfs-developers > ------------------------------------------------------- Using Tomcat but need to do more? Need to support web services, security? Get stuff done quickly with pre-integrated technology to make your job easier Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo http://sel.as-us.falkag.net/sel?cmd=lnk&kid0709&bid&3057&dat1642 _______________________________________________ Owfs-developers mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/owfs-developers
