Making some progress with the fixes. It's more tedious and error-prone than difficult.

I'll need some serious testers when done.

Paul

On 4/19/06, Jan Bertelsen <[EMAIL PROTECTED]> wrote:

OK, but as far as I can see (I'm not a skilled C-programmer), removing the
embedded functions from owhttpd and owfs is quite extensive. 3 or 4 new
arguments has to be added to dirfunc() so that output file descriptor and
other things can be passed.

I don't know if this is the right way to fix the problem?

Any suggestions??

Jan B.


On Fri, April 14, 2006 15:58, Wim Heirman wrote:
> From http://www.manoverboard.org/weblog/fritza/StepintoXcode/ :
>
> """
> Embedded functions are now prohibited because gcc implemented them by
> pushing the code onto the stack, and executing them there. Many security
> exploits work by executing code injected into the stack, and it is a
> prudent security measure to make the stack non-executable, even at the
> expense of embedded functions.
> """
>
> The newer kernels already refuse to start a thread with code located on
> the stack (which is what the problem was with owserver), a few GCC
> versions from now the embedded functions will probably not even compile
> anymore...
>
> Regards,
> Wim.
>
>
> Paul Alfille wrote:
>> Well, it looks like we should just get rid of the embedded functions. If
>> it breaks Fedora 5, I'm sure we'll get problems on other platforms from
>> time to time.
>>
>> Paul
>>
>> On 4/14/06, * Jan Bertelsen* <[EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]>> wrote:
>>
>>     It seems that I'm having the same problem with embedded functions as
>>     Wim
>>     ([Owfs-developers] owserver segfaulting on startup).
>>
>>     Im running ow on a Fedora Core 5 and it's seg-faulting all the time.
>> And
>>     yes, it's running kernel 2.6.16 On FC4 all was working.
>>
>>     owserver seems to be working now, but owfs and owhttpd fails when
>> they
>>     call a embedded function like dirfunc in ow_dir.c and
>> owhttpd_handler.c
>>
>>     I'm wondering if there is a special "security-function" in FC5 which
>>     don't like embedded functions. Could it be SELinux? Or maybe a
>> missing
>>     compiler option??
>>
>>     Any ide??
>>
>>     /Jan
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>     -------------------------------------------------------
>>     This SF.Net email is sponsored by xPML, a groundbreaking scripting
>>     language
>>     that extends applications into web and mobile media. Attend the live
>>     webcast
>>     and join the prime developer group breaking into this new coding
>>     territory!
>>     http://sel.as-us.falkag.net/sel?cmd=lnk&kid=110944&bid=241720&dat=121642
>>     <http://sel.as-us.falkag.net/sel?cmd=lnk&kid=110944&bid=241720&dat=121642 >
>>     _______________________________________________
>>     Owfs-developers mailing list
>>     [email protected]
>>     <mailto:[email protected]>
>>     https://lists.sourceforge.net/lists/listinfo/owfs-developers
>>
>>
>
> --
> ir. Wim Heirman,
> ELIS Department, Ghent University, Belgium
> Phone: +32-9-264.95.27
> E-mail: [EMAIL PROTECTED]
> http://www.elis.UGent.be/~wheirman/
>
>
> -------------------------------------------------------
> This SF.Net email is sponsored by xPML, a groundbreaking scripting
> language
> that extends applications into web and mobile media. Attend the live
> webcast
> and join the prime developer group breaking into this new coding
> territory!
> http://sel.as-us.falkag.net/sel?cmd=lnk&kid=110944&bid=241720&dat=121642
> _______________________________________________
> Owfs-developers mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/owfs-developers
>



-------------------------------------------------------
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmdlnk&kid0709&bid&3057&dat1642
_______________________________________________
Owfs-developers mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/owfs-developers

Reply via email to