Re: [firebird-support] Firebird Download Malware

2016-01-03 Thread Christian Gütter n...@guetter.org [firebird-support]
Hi,

> I downloaded FB 2.5.5 from firebirdsql and my Microsoft Essentials 
> detected it as a malware.

I am facing the same problem.
The following file is affected:
http://sourceforge.net/projects/firebird/files/firebird-win64/2.5.5-Release/Firebird-2.5.5.26952_0_x64.exe/download

This seems to be a false alarm though.
According to Virustotal, 54 different scan engines say the file is
clean:
https://www.virustotal.com/de/file/e4ce70fd1be17b07fd26554ef322ee14f65fef8d398aaa707df115530aa0f410/analysis/

Funnily, the Microsoft scan engine at Virustotal also considers it as
clean.


Cheers,
Christian



Re: [firebird-support] Re: Event name size?

2016-01-03 Thread Geoff Worboys ge...@telesiscomputing.com.au [firebird-support]
hv...@users.sourceforge.net [firebird-support] wrote:
>  Quick look at sources show that

> 1. isc_event_block\gds__event_block and 
> isc_event_counts\gds__event_counts make assumption that 
> event name length is 1-byte wide, i.e. it encode\decode 
> event into\from event blocks using 1-byte length for names. 
> This give us up to 255 bytes for name string.

> 2. gds__event_block_a\isc_event_block_a assume that event 
> names is no more than 31.  I.e. if application uses these 
> API, it will be limited by 31 bytes names.  Comments shows 
> that XXX_a API's is used by ADA preprocessor.

> 3. Event manager uses 2-byte for name length.

> 4. Engine make no guess about event name length, at least 
> i see no such code.

> So, i'd say you may use events with names up to 255 bytes 
> (assume you not using XXX_a API's).  But, again, it was a 
> quick look and i could miss something.

> Regards,
> Vlad  

Thanks for that.  It ties fairly well with what I could see, 
but I'm not familiar with all the pieces.  I'm pleased it's
not still 15.  :-)

-- 
Geoff Worboys
Telesis Computing Pty Ltd



[firebird-support] Re: Event name size?

2016-01-03 Thread hv...@users.sourceforge.net [firebird-support]
Quick look at sources show that

1. isc_event_block\gds__event_block and isc_event_counts\gds__event_counts make 
assumption that event name length is 1-byte wide,
i.e. it encode\decode event into\from event blocks using 1-byte length for 
names. 
This give us up to 255 bytes for name string.

2. gds__event_block_a\isc_event_block_a assume that event names is no more than 
31. 
I.e. if application uses these API, it will be limited by 31 bytes names. 
Comments shows that XXX_a API's is used by ADA preprocessor.

3. Event manager uses 2-byte for name length.

4. Engine make no guess about event name length, at least i see no such code.

So, i'd say you may use events with names up to 255 bytes (assume you not using 
XXX_a API's). 
But, again, it was a quick look and i could miss something.

Regards,
Vlad

Re: [firebird-support] Firebird Download Malware

2016-01-03 Thread Mark Rotteveel m...@lawinegevaar.nl [firebird-support]
On 3-1-2016 03:22, Hugo Eyng hugoe...@msn.com [firebird-support] wrote:
> Hello.
>
> I downloaded FB 2.5.5 from firebirdsql and my Microsoft Essentials
> detected it as a malware.
>
> Did anybody face the same problem?

Could you specify:

* The file you download (link please)
* When did it report this (on download, or later?)
* What were the details of the report.

Are you sure you are talking about Microsoft Security Essentials 
reporting it as malware, or the Windows smartscreen functionality 
reporting it as "unknown publisher, potentially malware"?

Mark
-- 
Mark Rotteveel