Re: [Oorexx-devel] Discuss: Open source encryption software export regulations
David Ashley w.david.ash...@gmail.com wrote: ...we are responsible for ensuring that it does not fall into the wrong hands (a banned country). What stops anyone from downloading pretty much any code they want to use, in the UK or USA or wherever, then putting it on a USB stick and sending it to a banned country? Or zipping it and emailing it? Don't get me wrong, I can see why the US government might want to try to enforce this, but how can it? If someone flies from the US, does someone scan every disk in every laptop that's on the way out? -- Jeremy Nicoll - my opinions are my own -- Everyone hates slow websites. So do we. Make your web apps faster with AppDynamics Download AppDynamics Lite for free today: http://p.sf.net/sfu/appdyn_sfd2d_oct ___ Oorexx-devel mailing list Oorexx-devel@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/oorexx-devel
[Oorexx-devel] Emailed copies of bugs/patches threads
Does anyone else find the new messages unwieldy compared with the old-style ones? With what we had before, since most types of post contained the whole history of a thread up to that point, I merely made sure I only had the most recent post for each thread. But now, each thread seems to have a mixture of posts; some have discussion of the ins outs of an issue in them, while others just document different steps/ management milestones in the resolution of a problem. But compared with, say, reading posts in a newsgroup I never seem to be able to find my way around each topic easily. In fact, there's precious little threading involved. Is it just me? -- Jeremy Nicoll - my opinions are my own -- Don't let slow site performance ruin your business. Deploy New Relic APM Deploy New Relic app performance management and know exactly what is happening inside your Ruby, Python, PHP, Java, and .NET app Try New Relic at no cost today and get our sweet Data Nerd shirt too! http://p.sf.net/sfu/newrelic-dev2dev ___ Oorexx-devel mailing list Oorexx-devel@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/oorexx-devel
[Oorexx-devel] External function file search in Ubuntu
There's been a long thread in comp.lang.rexx in the last few days from someone trying to get external functions to work on an Ubuntu system. This was ooREXX 4.1.2 The user's problem turned out to be due to him making function calls with unquoted function names, which were folded to uppercase by oorexx and then didn't match the actual file mixed-case leafnames - no surprise there. But in the Ref manual section 7.2.1 about file search orders it says Unix-based systems have a case sensitive file system, so files much be exact case matches in order to be located. For these systems, each time a file name probe is attempted, the name will be tried in the case specified and also as a lower case name. The user did also, he says, try with the external function files named in lower case. You can check that if you want in his news post: Date: Thu, 20 Sep 2012 22:08:30 -0400 From: Cruz, Jaime spamm...@bite.me Subject: Re: FINALLY got OOREXX working under Ubuntu!! Message-ID: x7wdncqls5acucbnnz2dnuvz_t6dn...@giganews.com ... Okay, I rebooted, edited out all the SysAddRexxMacro calls, then renamed all of the external functions in the directory to lower case. That didn't work. Next, I renamed them to all upper case. BINGO! That worked! I am unable to check this, not having any linux systems. Can someone-else tell if this is a search-order bug, or a documentation error? The same user also has been questioning where the .deb-based install he did put the oorexx documentation. Anyone here know? -- Jeremy Nicoll - my opinions are my own -- Got visibility? Most devs has no idea what their production app looks like. Find out how fast your code is with AppDynamics Lite. http://ad.doubleclick.net/clk;262219671;13503038;y? http://info.appdynamics.com/FreeJavaPerformanceDownload.html ___ Oorexx-devel mailing list Oorexx-devel@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/oorexx-devel
Re: [Oorexx-devel] External function file search in Ubuntu
Rick McGuire object.r...@gmail.com wrote: This is working correctly. The function name uses normal Rexx rules for name resolution. If the call name is coded as a symbol, then the name being called is ALWAYS the uppercase version, since all symbols have as an eventual value the uppercase value of the symbol. So calls to foo, Foo, and FOO are all calls to a function named FOO. This all happens before the search for an external function ever begins, so that code is not even aware of the original case. The instruction itself has already folded the name to uppercase by execution time, so the original case is no longer available. If a quoted string is used, then the original case is maintained. Sure; I wasn't asking that. Why does the ref manual say that a lower-case name search will be tried? -- Jeremy Nicoll - my opinions are my own -- Got visibility? Most devs has no idea what their production app looks like. Find out how fast your code is with AppDynamics Lite. http://ad.doubleclick.net/clk;262219671;13503038;y? http://info.appdynamics.com/FreeJavaPerformanceDownload.html ___ Oorexx-devel mailing list Oorexx-devel@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/oorexx-devel
Re: [Oorexx-devel] External function file search in Ubuntu
Rick McGuire object.r...@gmail.com wrote: Because it IS part of the search order. But that really only applies to the searches using file extensions. This is not done with the raw name because it resulted in too many false positives with non-rexx programs (this was actually added at one point, but it had to be backed out). In the poster's situation, he's created his files without extensions, so only the matching case is used. If he renamed them to have a .rex extension, then there is much less case insensitivity involved. Ok, that makes sense. I've raised a Documentation bug (hopefully correctly, I don't understand te new ticketing software), so maybe someone can clarify this in future manuals. Separately from the doc issue, is there any point in making a feature request that in some way - maybe a trace option? - one could have oorexx tell you in succession all the places it looked for a specific-named file? The whole process strikes me as being mind-bogglingly complicated and although descriptions go some way to describe what's being taken into account, actually having a clear understanding of precisely which name of something is being looked for and in what location is ... hard. I'd like to see output something like: trace Search Call NoSuchFunction() 3 *-* Call NoSuchFunction() 'NOSUCHFUNCTION' not found in REXX_PATH 'NOSUCHFUNCTION' not found in PATH 'NOSUCHFUNCTION' not found in ... 'NOSUCHFUNCTION.XYZ' not found ... etc with whatever details are appropriate, preferably showing the exact case and file extensions looked for in the order they are tested in. For things like search in REXX_PATH or PATH, if the oorexx code itself identifies the separate directories involved then I'd rather see those enumerated in the trace output, but if it just uses some system function to search for file x on path y then the environment var name would be enough detail. For a function call where the search is successful I think the trace output shouls also show the location where the item was found. -- Jeremy Nicoll - my opinions are my own -- Got visibility? Most devs has no idea what their production app looks like. Find out how fast your code is with AppDynamics Lite. http://ad.doubleclick.net/clk;262219671;13503038;y? http://info.appdynamics.com/FreeJavaPerformanceDownload.html ___ Oorexx-devel mailing list Oorexx-devel@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/oorexx-devel
Re: [Oorexx-devel] Missing tracker notifications
Rick McGuire object.r...@gmail.com wrote: I just discovered there have been multiple tracker items created over the last couple of days, but I never got tracker notifications for these. Are others seeing these notifications? No; I think I've seen one commit msg in the last two days and nothing else at all. -- Jeremy Nicoll - my opinions are my own -- Got visibility? Most devs has no idea what their production app looks like. Find out how fast your code is with AppDynamics Lite. http://ad.doubleclick.net/clk;262219671;13503038;y? http://info.appdynamics.com/FreeJavaPerformanceDownload.html ___ Oorexx-devel mailing list Oorexx-devel@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/oorexx-devel
[Oorexx-devel] Differing formats of commit emails?
Is there a reason why most (all?) of the commit emails I've received until today had subjects like: Subject: [oorexx:code-0] miesfeld committed to Open Object Rexx Code SVN Repository: Publican ooDialog - work on links but I've just received a couple with subjects like: Subject: [oorexx:code-0] 2 new commits to Open Object Rexx Code SVN Repository I only ask because I was filtering these on the basis of the Subject header containing committed to Open Object Rexx Code SVN Repository: and am wondering if I need some more subtle (perhaps regex based) pattern match to trap all the possibilities? -- Jeremy Nicoll - my opinions are my own -- Live Security Virtual Conference Exclusive live event will cover all the ways today's security and threat landscape has changed and how IT managers can respond. Discussions will include endpoint security, mobile security and the latest in malware threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/ ___ Oorexx-devel mailing list Oorexx-devel@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/oorexx-devel
Re: [Oorexx-devel] Docs to Publican Status
David Ashley w.david.ash...@gmail.com wrote: I am not 100% sure, but I believe it has to do with elements that will not completely fit on a page. For instance, an ordered list or a paragraph. I think it is warning that it had to break the element and continue it to the next page. If all the error messages have values as small as eg 77 millipoints in them, it can't be that, can it? There's 72 points to the inch, so 77 millipt is going to be much smaller than anything a human being would regard as 'content'. -- Jeremy Nicoll - my opinions are my own -- Live Security Virtual Conference Exclusive live event will cover all the ways today's security and threat landscape has changed and how IT managers can respond. Discussions will include endpoint security, mobile security and the latest in malware threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/ ___ Oorexx-devel mailing list Oorexx-devel@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/oorexx-devel
Re: [Oorexx-devel] Ad sorting arrays: request for discussion/thoughts ...
Rick McGuire object.r...@gmail.com wrote: These are fundamentally different constructs. Do Over actually requests a new version from the collection which is defined as being non-sparse. The sort is an in-place modification of the array itself. REXX used to have a principle of least astonishment. You're saying that to be un-astonished a user has to know the inner workings of the implementation which seems, well, astonishing. [snip] Raising an error if a~items a~size would mean the above scenario would only work if there were exactly 1000 items added to the array. The dichotomy between items and size and the meaning of sparse is intentional. This change is not going to be made. Is it possible then that a decent explanation that ordinary users can understand can be put into the relevant doc? -- Jeremy Nicoll - my opinions are my own -- Live Security Virtual Conference Exclusive live event will cover all the ways today's security and threat landscape has changed and how IT managers can respond. Discussions will include endpoint security, mobile security and the latest in malware threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/ ___ Oorexx-devel mailing list Oorexx-devel@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/oorexx-devel
Re: [Oorexx-devel] Ad sorting arrays: request for discussion/thoughts ...
Rony G. Flatscher rony.flatsc...@wu-wien.ac.at wrote: Yesterday I stumbled over a surprising behaviour of Array's sort, which led me to open a bug report https://sourceforge.net/p/oorexx/bugs/1107/. Obviously the sorting is working as designed, hence the reported behaviour was not accepted as a bug. I've read this and the bug report and think one could argue it from both points of view... I've also looked at the Ref manual section on arrays. I'm very much not an expert on any of the oo stuff. Arrays are descibed though as: An array is a possibly sparse collection with indexes that are positive whole numbers. which says to me that sparseness (which might be the issue) are an expected attribute of an array. I looked at the definition of remove. It does not say that an array which has had an item removed ceases to be an array, and it does not say that such an array (if not already sparse) becomes sparse. That would say to me, naively(?) that a sortable array which then has an element removed, is still a sortable array. On the other hand the sort method says right at the start Sorts an array of Comparable items... which makes me wonder if there might be an element of the if a == .nil issue involved in this? Also the link to sorting arrays takes one to text that says: Any non-sparse Array instance can have its elements placed into sorted order using the sort method of the Array class. which without going into useful details does suggest sparseness is an issue. Maybe it would be useful if arrays had an attribute that said whether or not they were sparse? On the whole I think I'd go with Rony's view that removed items should all sort together to one or other extreme of an array, if they're still part of the array. Otherwise, remove might as well be renamed ruin. -- Jeremy Nicoll - my opinions are my own -- Live Security Virtual Conference Exclusive live event will cover all the ways today's security and threat landscape has changed and how IT managers can respond. Discussions will include endpoint security, mobile security and the latest in malware threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/ ___ Oorexx-devel mailing list Oorexx-devel@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/oorexx-devel
Re: [Oorexx-devel] Ad sorting arrays: request for discussion/thoughts ...
Rick McGuire object.r...@gmail.com wrote: On Fri, Aug 24, 2012 at 7:15 AM, hakan hexi...@users.sourceforge.netwrote: I think it's not consistent with Do s over array say s end These are fundamentally different constructs. Do Over actually requests a new version from the collection which is defined as being non-sparse. That sounds to me like a colossally inefficient thing to do - are you really saying that for do/over there's a second copy of the array created (and then destroyed?)? -- Jeremy Nicoll - my opinions are my own -- Live Security Virtual Conference Exclusive live event will cover all the ways today's security and threat landscape has changed and how IT managers can respond. Discussions will include endpoint security, mobile security and the latest in malware threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/ ___ Oorexx-devel mailing list Oorexx-devel@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/oorexx-devel
Re: [Oorexx-devel] Fwd: [oorexx:feature-requests] #473 String compares should have special exception for .nil
Rick McGuire object.r...@gmail.com wrote: This is fairly simple to implement for the equals/not equals variants. The real open question is how to handle the other comparisons such as , , etc. These are probably VERY rare situations, but the behavior still needs to be defined. I see three obvious paths: 1) Leave them the way they are today. For these operators, the operation will go through the existing string conversion and perform the comparison on the string value The Nil Object. 2) Have them always return .false. It sort of makes sense, but it creates some unexpected behavior such as a .nil and a .nil both returning .false. 3) Make this an error. This, of course, will really break the rare program that happens to be doing this. On the other hand, the reverse comparison .nil a IS an error today, because only the String class implements those comparison methods. I suspect 1) is the course that makes the most sense and will have the least disruption. But I'm interested in opinions on this, and I may have missed other potential solutions. Does ooREXX have any scope for 'pragma' or options that would allow a user to control how this works? -- Jeremy Nicoll - my opinions are my own -- Live Security Virtual Conference Exclusive live event will cover all the ways today's security and threat landscape has changed and how IT managers can respond. Discussions will include endpoint security, mobile security and the latest in malware threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/ ___ Oorexx-devel mailing list Oorexx-devel@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/oorexx-devel
Re: [Oorexx-devel] Is there any way to turn off HTML in the emails SF sends out?
Rony G. Flatscher rony.flatsc...@wu-wien.ac.at wrote: If you go to: https://sourceforge.net/auth/prefs/, you should find a drop-down box at the bottom, where you can choose Plain Text (other options: HTML, Combined) and pressing the button entitled Save Changes. Thank-you! Unfortunately I found it was already set to plain text. -- Jeremy Nicoll - my opinions are my own -- Live Security Virtual Conference Exclusive live event will cover all the ways today's security and threat landscape has changed and how IT managers can respond. Discussions will include endpoint security, mobile security and the latest in malware threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/ ___ Oorexx-devel mailing list Oorexx-devel@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/oorexx-devel
[Oorexx-devel] Is there any way to turn off HTML in the emails SF sends out?
The old emails I got when people updated bugs etc didn't have unnecessary html parts in them, but I see the new ones do. Does anyone know if there's a way to turn them off, either globally or at a user-level? -- Jeremy Nicoll - my opinions are my own -- Live Security Virtual Conference Exclusive live event will cover all the ways today's security and threat landscape has changed and how IT managers can respond. Discussions will include endpoint security, mobile security and the latest in malware threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/ ___ Oorexx-devel mailing list Oorexx-devel@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/oorexx-devel
Re: [Oorexx-devel] Comment on bug 2903480 - socksend error if first word of message ends in colon
Mark Miesfeld miesf...@gmail.com wrote: I closed that bug because the original submitter of the bug refused to provide a test case that demonstrated the bug. So, I had to build my own test case, and my test case worked fine. There was nothing in the original report that suggested a problem with a MIME message, though. I appreciate the work you do on bugs. I would like all bugs in ooRexx to be fixed. I know if you open up a bug, you will have the courtesy to follow up with it when needed. If we need more information, I know you will provide it if we ask. So, please open up a new bug. ;-) Great. I posted here because you specifically said in your most recent update to that problem: --- Comment By: Mark Miesfeld (miesfeld) Date: 2012-08-11 10:09 Message: Tested on both ooRexx 4.1.1 release and ooRexx trunk using ... ... I'm closing this as Works for me but it could also be Out of date If you would like to discuss this further, please discuss it on one of the ooRexx mailing lists, or even one of the project forums. - And now you say that instead I need to raise a bunch of bug reports. How am I supposed to know when it is reasonable to /discuss/ issues and when it is reasonable to report bugs? -- Jeremy Nicoll - my opinions are my own -- Live Security Virtual Conference Exclusive live event will cover all the ways today's security and threat landscape has changed and how IT managers can respond. Discussions will include endpoint security, mobile security and the latest in malware threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/ ___ Oorexx-devel mailing list Oorexx-devel@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/oorexx-devel
Re: [Oorexx-devel] Comment on bug 2903480 - socksend error if first word of message ends in colon
Mark Miesfeld miesf...@gmail.com wrote: On Sun, Aug 19, 2012 at 7:26 AM, Jeremy Nicoll - ml sourceforge jn.ml.sfrg...@letterboxes.org wrote: There was nothing in the original report that suggested a problem with a MIME message, though. But he did. He said: Try changing the message text in testsmtp.rex to 'Error: Something here.' The email arrives, but there is no message text in it. testsmtp.rex is one of the example programs in the incubator. Doing what he suggested works for me. Right, sorry. You're saying that the testsmtp.rex exec he mentioned implicitly used MIME. I didn't realise that, because the exec he mentioned wssn't attached to the original report. When you later did attach one I did not realise the MIME use in that was always there; I thought you'd just added it for your test case. Great. I posted here because you specifically said in your most recent update to that problem: --- Comment By: Mark Miesfeld (miesfeld) Date: 2012-08-11 10:09 If you would like to discuss this further, please discuss it on one of the ooRexx mailing lists, or even one of the project forums. - Right. You brought it up here again. I explained why I closed it. You brought up several things you think are bugs. I said you should open up bugs for them. I think that is the exact definition of a discussion. But not if there needs to be a discussion on how the SMTP and MIME classes might best be changed. I don't know if there does need to be a discussion. By posting here I thought we'd find out. I don't think that's a good interpretation of the discussion. ;-) The interpretation is in addition to, not instead of. I didn't say you shouldn't have discussed this here. No-one has discussed it here. I've made some suggestions about how, say, mime.cls might need restructured. Nobody has commented on that. -- Jeremy Nicoll - my opinions are my own -- Live Security Virtual Conference Exclusive live event will cover all the ways today's security and threat landscape has changed and how IT managers can respond. Discussions will include endpoint security, mobile security and the latest in malware threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/ ___ Oorexx-devel mailing list Oorexx-devel@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/oorexx-devel
Re: [Oorexx-devel] Comment on bug 2903480 - socksend error if first word of message ends in colon
Mark Miesfeld miesf...@gmail.com wrote:
On Sat, Aug 11, 2012 at 7:44 AM, Rick McGuire object.r...@gmail.com
wrote:
I'm in total agreement with Jerry on this one. This is an area I have a
little bit of expertise, having written the Apache javamail
implementation.
Okay, I'll go back and look at that more closely.
My reading of the submitters report was that he had the line immediately
following the header fields.
Maybe he did, but more to the point is that if someone uses the smtp class
to send plain text with a colon in it the way he suggested, it does not
work.
I was a bit disappointed to see that although you did reopen the bug report,
you closed it again almost immediately saying it worked for you. But it
only worked for you, as far as I can see, because you used an example with
the message content wrapped up as a MIME part.
I've done some experiments and found that plain text content continues to
work if it doesn't contain a colon at the end of the first word, and fails
if it does. I'll attach my test code to this post but I don't know if the
mail-list supports attachments. I don't know if I can attach it to the
now-closed bug report either...
I surmised earlier that the commenting out in smtp.cls in the send method of
the line of code that should send the required blank line between headers
and content was why the text-with-a-colon stuff was failing...
The code in smtp.cls for send in V4.1.1, as distributed, builds various
headers than contains:
retc = self~strmsock~lineout('Subject:' msg~Subject)
-- retc = self~strmsock~lineout('')
retc = self~strmsock~lineout(msg~content)
retc = self~strmsock~lineout('.')
On the face of it this would only be expected to work if msg~content started
with a blank line, but it does work if content is eg This is some text.. I
don't know why that is, unless my mail provider's mail gateway has inserted
the missing blank line when it first sees a line that clearly doesn't
contain a header. It's not impossible that that does happen there, because
I suspect that missing out the blank line is a common fault in code that
tries to send SMTP messages.
I've also noticed that my mail provider's gateway is also adding a Date:
header to my test emails, so for example when I view an arriving test
message it might contain:
...
From: testsmtp.from.val...@wingsandbeaks.org.uk
To: testsmtp.tooo.val...@wingsandbeaks.org.uk
Subject: testsmtp subj 2 at 18 Aug 2012 22:02:57 - plain text with colon
This: is some ordinary text.
Date: Sat, 18 Aug 2012 22:03:17 +0100
X-AAISP: Date header line added by h.hopeless.aa.net.uk
... lots of other X-headers they added
If msg~content contains something like This: is a line then that line is
treated as a header in the outgoing message because it immediately follows
the generated Subject: line (as shown just above). Such a mail is sent, but
when it is received it has no content. For my tests, when I review the
incoming test messages, the This: is a line ends up in the midst of many
headers because others get added to the mail as it travels.
If msg~content contains a MIME part the mail is sent ok... which surprised
me at first. I wondered why it worked. It turns out that for a MIME part,
content consists of
some mime-related headers
a blank line
then the boundary-delimited parts
and this works because the first few headers immediately follow the simple
headers, and the required blank line has been generated in the MIME part.
This makes me think that the puzzle (well, I was puzzled) over why the
blank-line-sending code in the send method has been commented out is because
whoever developed the mime aspect of this realised that if the send method's
blank line is produced messages would contain
all the normal headers, ending in subject:
the blank line from the send method
orphaned headers for the mime stuff
the blank line in the mime stuff
the mime content
and of course that wouldn't work. (I mean: the mail would be sent but the
recipient's email client would not unpack it properly because the mime
headers telling it how to do that would be in the body text not the main
header block.)
It seems to me that the fix for this is quite complicated - beyond me so far
as the oo aspects go. I think what send should be generating is
all the simple headers
optionally the mime headers if the following content is MIME
the always-required blank line
the content, whether plain text or MIME, dot-stuffed as needed
.
which would need mime.cls to be able to keep the mime headers and mime
content separate from each other and return them separately to a caller.
That may have ramifications elsewhere; MIME is not used exclusively for
email. I don't know how the ooREXX project normally handles significant
changes in behaviour of previously shipped classes.
I have noticed another error in smtp.cls:
::method Logoff
expose responce strmsock
use strict arg
/*
Re: [Oorexx-devel] Request for directions (Fwd: [oorexx:code-0] miesfeld committed to Open Object Rexx Code SVN Repository: 1103 - makeorx.bat typo or not
Rick McGuire object.r...@gmail.com wrote: Not going to work. The new tracker system forwards the emails using the email address of the sender, so we run into all sorts of permission problems with setting that up. And items now don't have a copy of a whole discussion in them? So we have to get into habit of keeping each separate contribution to a thread rather than just the lastest copy of an entire thread. -- Jeremy Nicoll - my opinions are my own -- Live Security Virtual Conference Exclusive live event will cover all the ways today's security and threat landscape has changed and how IT managers can respond. Discussions will include endpoint security, mobile security and the latest in malware threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/ ___ Oorexx-devel mailing list Oorexx-devel@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/oorexx-devel
[Oorexx-devel] Comment on bug 2903480 - socksend error if first word of message ends in colon
Well: this is a test line.
I wonder if this message will get sent? I certainly expect it to. In this
bug report Mark recently said:
More simply put, because of the definition of header fields, an email
message body can not begin with a word ending in a colon because a line
beginning with a token ending in a colon marks it as a field.
which I think is wrong. My understanding of the internal format of emails
is that the header lines (all starting with a word ending in a colon) are
delimited from the message body by a blank line.
The only limitation I'm aware of for the message body itself is that a
message body line containing only a dot needs to be changed (dot stuffed)
to a double dot by the mail transport as it is sent (and such a line changed
back to just a single dot on reception). A mail being transported by SMTP
is preceded by SMTP envelope headers, and followed by a line containing just
one dot.
However it's quite unclear to me from the original report whether the
message the user was trying to send consisted of a bunch of headers, then a
blank line, then the error message, or whether it was just the error
message. I couldn't find the testsmtp.rex that's referred to.
I looked at the smtp class doc in rxsock and found it confusing, telling one
about all the parts of a process but not describing what its concept of an
SMTP message actually was - eg whether the sender had to specify the headers
they wanted in the message that was to be sent...
So, I looked at smtp.cls; (this is the V4.1.1 one). In ::method Send, so
far as I can see, there are some problems:
a) comments are wrong at:
/* send the 'To:' header */
retc = self~strmtransact('MAIL FROM:'msg~From, '2')
if retc = .true then do
self~debugsay('Error: MAIL FROM command to' rhost 'failed.')
return -1
end
/* send the 'From:' header */
do rec over msg~recipients
retc = self~strmtransact('RCPT TO:' rec, '2')
if retc = .true then do
self~debugsay('Error: RCPT TO command to' rhost 'failed.')
return -1
end
end
since (1) MAIL FROM has nothing to do with TO:
(2) RCPT TO values have nothing to do with FROM:
b) after sending DATA, and a From: header (which arguably should be
optional), the code builds a To: header from a list of all the recipient
addresses. This surely shouldn't be done as it exposes all the recipient
addresses to anyone getting any copy of a mail sent this way. It also makes
it impossible eg to send a mail that's
TO: no-one
CC: me
BCC: a list of recipients
c) then a Subject: header is sent (arguably that should be optional)
d) then there's a line of code commented out, which I think shouldn't be.
It's the one that creates the required blank line between headers and
content. If the OP had created a proper SMTPmsg structure with body text
starting with a word starting with a colon, that text would have wrongly
appeared to be the last header in the message because of there being no
blank line.
e) when the body is sent, by
retc = self~strmsock~lineout(msg~content)
there's no code doing dot-stuffing; do you expect the user to have
prerpared content with the doubled dots in it?
--
Jeremy Nicoll - my opinions are my own
--
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and
threat landscape has changed and how IT managers can respond. Discussions
will include endpoint security, mobile security and the latest in malware
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
___
Oorexx-devel mailing list
Oorexx-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/oorexx-devel
Re: [Oorexx-devel] Possible Documentation Change
David Ashley w.david.ash...@gmail.com wrote: The document looks outstanding! It's certainly polished, in places. I just looked at some pages at random though and found one problem, where the shaded box around a syntax diagram straddles a page break - for 5.18 SockRecv at the foot of page 24. Similarly (though not as bad) see 7.2.16 state at the foot of p55. And at the foot of p36 there's a where that's not connected with the text it introduces. I've never used XML or DocBook, but did long ago use IBM's DCF/Script package, writing macros for quite complex 3-pass processing of documents (where the macros did different things on different passes). Script had control words (dot commands) for bracketing sections of text that should not be broken up, and others eg to force a page break if there was insufficient space at the foot of one page to start a new section of a document. (These things only got used if one wrote macros that issued them with appropriate arguments in appropriate places.) The output from this system looks a lot like it's created nice looking text but just poured it onto a series of pages without taking page-breaks into account. -- Jeremy Nicoll - my opinions are my own -- Live Security Virtual Conference Exclusive live event will cover all the ways today's security and threat landscape has changed and how IT managers can respond. Discussions will include endpoint security, mobile security and the latest in malware threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/ ___ Oorexx-devel mailing list Oorexx-devel@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/oorexx-devel
Re: [Oorexx-devel] Debugging rexx internals...
Mark Miesfeld miesf...@gmail.com wrote: It would be doable, but the question is what is the option to do? I don't know, it would take someone smarter than me to figure out what the option does. It's hard to make an intelligent response to this, as I don't know the internals of ooRexx... but I'll try. Maybe it would be helpful if you told us which internal data structures you most often, or first, look at in a debugger. I'd kind of expect some or all of: a) the whole symbol table (as it is stored, not equivalent to using SysDumpVariables) b) whatever structures ooRexx uses to control how it interprets an exec; eg which exits are in use, what DLLs are loaded, whatever... c) the stack at some instant d) maybe the addresses of some significant control structures? That's if ooRexx allows use of storage() by an exec to read its own control blocks? OOPS, I see that's not implemented. Maybe it should be? e) maybe the whole of a process's storage? Is there a cross-system equivalent to MVS's SLIP traps? (SLIP's a privileged operator command that lets you define a condition that the hardware will test continually as programs execute - eg that a register will get set to a particular value, or a particular storage location will get altered), and when it trips the OS takes an SVC dump of the address spaces concerned. It's typically used by sysprogs to collect evidence for intractable rarely-ccurring but serious problems. But even an option to dump the process storage on some trigger would possible be useful. f) In all the places that ooRexx calls some external API, is there some standard function wrapped around that? Or do all these API calls just happen directly as they're needed? If there's wraparound then you could trace the parameters to and responses from every API call. -- Jeremy Nicoll - my opinions are my own -- Live Security Virtual Conference Exclusive live event will cover all the ways today's security and threat landscape has changed and how IT managers can respond. Discussions will include endpoint security, mobile security and the latest in malware threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/ ___ Oorexx-devel mailing list Oorexx-devel@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/oorexx-devel
[Oorexx-devel] Debugging rexx internals...
In one of the support requests on the tracker: https://sourceforge.net/tracker/?func=detailatid=684731aid=3516270group_id=119701 there's a long running problem with SysFileTree described, raised by Jerry Senowitz (jlsen). I recently commented: -- Comment By: Jeremy C B Nicoll (jeremynicoll) Date: 2012-07-13 06:45 Message: Am I missing something here? Mark says: We know there is a bug in SysFileTree. It is regrettable that the bug remains open, but I have spent dozens of hours trying to reproduce the crash, and have not been able to. Without a way to reproduce the crash, the bug has to remain low on my list of priorities. which is fair enough. But the OP presumably can reproduce the crash. Would it not be more useful to put some time into providing him with some help in generating a trace (or profile or whatever debugging is possible for C) of the SysFileTree code's execution path, or something? -- Mark's just responded to that with: -- Jeremy - I read your post of course when you wrote it. I didn't reply because I didn't want to get into a long debate about it. The short answer is that trying to debug a difficult problem on a remote system that I have no access to, other than written communication with someone I don't know well, is way beyond my skills. Because of this, I consider the probablity of success low and time spent on it probably wasted. -- which is ok, though I'm slightly unhappy about what I see as a suggestion that I'll get into a long debate about it. Hopefully I'm not starting that here, now. Is there no way that an ordinary user of ooRexx can generate some sort of trace or profile or something from an executing ooRexx interpreter? Maybe that translates into: is there any kind of debugging build of ooRexx that people can use instead of the normal one, to generate something useful to the developers? What do the developers do to create a trace for themselves? -- Jeremy Nicoll - my opinions are my own -- Live Security Virtual Conference Exclusive live event will cover all the ways today's security and threat landscape has changed and how IT managers can respond. Discussions will include endpoint security, mobile security and the latest in malware threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/ ___ Oorexx-devel mailing list Oorexx-devel@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/oorexx-devel
Re: [Oorexx-devel] Debugging rexx internals...
Mark Miesfeld miesf...@gmail.com wrote: Well, I didn't mean to make you unhappy. If it's a slight consolation, I consider anything more than a few words in either the forums or the support requests a long debate. ;-) Ah, ok. What do the developers do to create a trace for themselves? Can't speak for Rick completely, but I know he does this also. I use Microsoft's debugger to work on bugs. Is that an interactive tool? Is there no way that an ordinary user of ooRexx can generate some sort of trace or profile or something from an executing ooRexx interpreter? Not really, if the ordinary user doesn't know how to use a debugger. Which most ordinary ooRexx users do not know. I'm sure; even if they did that's no help for non-Windows system problems. But, most users won't install Microsoft's debuggers anyway. The good debugger is expensive. The free debugger is restricted and I'm not sure exactly what that translates into, so it may not be of much use. We have no mechanism set up to distribute debug builds. It is extremely rare that this would actually be of any use. Etc., etc.. I'm sure that's true. I dare say many of the simpler problems, especially if there's a test case that demos the fault, relate to problems in ooRexx itself. It must be much harder to find the cause when it's in either the host OS or a problem in the way ooRexx uses the OS (or its libs). And it must also be hard to be sure when fixing a problem that shows up in some OSes/environments not to affect others. [test cases] In this specific case, Jerry has done that of course. If his test programs had reproduced the bug on my system, it would most likely be fixed now. But, as you know it does not produce the problem on my system ... which sort of brings me back to the original point. We have to wonder why, especially as - as you said - users have complained about SysFileTree oddities for years. I know you're embarking in a rewrite of SysFileTree(). It's possible that this will also experience oddities. Is there any chance that in the code you write you can put some conditional code in that dumps responses from the OS somewhere, so that if it has problems users can turn on something that might be useful to you? -- Jeremy Nicoll - my opinions are my own -- Live Security Virtual Conference Exclusive live event will cover all the ways today's security and threat landscape has changed and how IT managers can respond. Discussions will include endpoint security, mobile security and the latest in malware threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/ ___ Oorexx-devel mailing list Oorexx-devel@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/oorexx-devel
Re: [Oorexx-devel] ooSQLite NULL value ?
Mark Miesfeld miesf...@gmail.com wrote: I'm just saying I think its place is in the application, or a higher level class that uses .ooSQLite. I think the same. Not sure if you know that you could use this syntax in ooRexx, or that you would like it: stmt ||= encapsulate(col1) || , Didn't know; not sure if I like it... -- Jeremy Nicoll - my opinions are my own -- Live Security Virtual Conference Exclusive live event will cover all the ways today's security and threat landscape has changed and how IT managers can respond. Discussions will include endpoint security, mobile security and the latest in malware threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/ ___ Oorexx-devel mailing list Oorexx-devel@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/oorexx-devel
Re: [Oorexx-devel] ooSQLiteDB name change to ooSQLiteDbConn or ?
Rick McGuire object.r...@gmail.com wrote: And indeed, you could also just change the name of the file used for ::requires and keep the names the same. That would allow for a pretty seamless upgrade path and it would still coexist with other programs that used a different version. I realise that it's possible that my questions make sense to me (but not, it seems, to you) because I don't properly understand all the ins and outs of the oo stuff. Also the issue is perhaps really a wider one for how ANY extension should be designed, not just the SQLite one, but this is the first such thing I've seen discussed here since joining this mail list. If one has two versions of the ooSQLite DLL and ooSQLite.cls installed, but given separate names (as I outlined earlier), I would expect there would be no problem if one user exec ::requires 'ooSQLite123.cls' and one had altered whatever it is within that cls file which specifies ooSQLite.dll and changed it to specify ooSQLite123.dll, and a second user exec ::requires 'ooSQLite456.cls'(altered to use ooSQLite456.dll) but what happens then if a single user exec has ::requires 'ooSQLite123.cls' ::requires 'ooSQLite456.cls' - if you want in that exec to use several databases, but more than one version of the SQLite engine? How do you code the connection request (or any other method etc) and specify that it goes to the right set of class definitions and hence the right dll? If that's not possible, would you be able to achieve it by encapsulating all SQLite123 processing in one subroutine (with one ::requires) and all SQLite456 processing in a second subroutine (with the other ::requires)? -- Jeremy Nicoll - my opinions are my own -- Live Security Virtual Conference Exclusive live event will cover all the ways today's security and threat landscape has changed and how IT managers can respond. Discussions will include endpoint security, mobile security and the latest in malware threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/ ___ Oorexx-devel mailing list Oorexx-devel@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/oorexx-devel
Re: [Oorexx-devel] Some comments on the ooSQLLite extension
Mark Miesfeld miesf...@gmail.com wrote: Here is an outline of the classes: * In SQLite, 95% of what any one would use are is done though APIs that either require a database connection or require a prepared statement. So the 2 main objects in ooSQLite are: Database connection: ::class 'ooSQLiteDB' public (in SQLite - struct sqlite3) Prepared statement: ::class 'ooSQLiteStmt' public (in SQLite - struct sqlite3_stmt) Something that catches my eye here isn't really a SQLite issue as such, but it seems to me that the implication of SQLite C structs having names which include a 3 is that future versions may be different. Do you have a mechanism in mind to allow future versions of ooSQLLite to use V4/5/6... structs and APIs? How would a programmer dictate which set were to be used for a particular db? Would it not be better to embed a 3 in the name of the class, whatever DLL (or whatever) it uses, and so on? -- Jeremy Nicoll - my opinions are my own -- Live Security Virtual Conference Exclusive live event will cover all the ways today's security and threat landscape has changed and how IT managers can respond. Discussions will include endpoint security, mobile security and the latest in malware threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/ ___ Oorexx-devel mailing list Oorexx-devel@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/oorexx-devel
Re: [Oorexx-devel] ooSQLiteDB name change to ooSQLiteDbConn or ?
Mark Miesfeld miesf...@gmail.com wrote: If the ooSQLite package gets included in the ooRexx distribution then an application written that uses ooSQLite will run on any system where the user of the application has ooRexx installed. And the user will not have to install anything else. But hopefully there's some way that the user can choose to install something else - a different build of whatever binary you provide, that has a different SQLite build inside(*) it? * - if it is statically linked 'inside' your binary? Or are you allowing a named DLL to be loaded by your interface code? I know from reading the SQLite users mail list - though I've not yet used SQLite for anything - that some users also make custom builds of SQLite themselves (see compile flags at http://www.sqlite.org/compile.html ). I would expect that if someone was using a custom-built SQLite binary for some application they'd want to be able to include it or build an equivalent into an instance of the ooRexx SQLite package, if they wanted to use ooRexx as part of that application. -- Jeremy Nicoll - my opinions are my own -- Live Security Virtual Conference Exclusive live event will cover all the ways today's security and threat landscape has changed and how IT managers can respond. Discussions will include endpoint security, mobile security and the latest in malware threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/ ___ Oorexx-devel mailing list Oorexx-devel@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/oorexx-devel
Re: [Oorexx-devel] Some comments on the ooSQLLite extension
Mark Miesfeld miesf...@gmail.com wrote: On Fri, Jun 15, 2012 at 7:33 AM, Jeremy Nicoll - ml sourceforge jn.ml.sfrg...@letterboxes.org wrote: Do you have a mechanism in mind to allow future versions of ooSQLLite to use V4/5/6... structs and APIs? How would a programmer dictate which set were to be used for a particular db? Would it not be better to embed a 3 in the name of the class, whatever DLL (or whatever) it uses, and so on? The ooSQLite package has entire SQLite database engine embedded inside it. So the programmer can not dictate which set of structs and APIs it works with. It works with the set it was built with. I know; I haven't explained well enough... The problem is that the set it was built with isn't flexible enough once there are multiple versions of the engines. If you had a database written / used with ooSQLite version, say: ooSQLite: ooSQLite Version 1.0.0.7897 (64 bit) Built Jun 14 2012 16:47:20 Copyright (c) RexxLA 2012-2012. All Rights Reserved. Rexx: Open Object Rexx Version 4.1.1 SQLite: SQLite Library Version 3.7.13 2012-06-11 02:05:22 and SQLite moved on to say, version 5.8.9, that was no longer compatible with the database file format, then Rexx programmers would have to decide whether they wanted to move on to ooSQLite 3.55.10, which has SQLite version 5.8.9 in it, or not. On a home system that mightn't be a problem but suppose someone was using ooRexx on a commercial/ production system. They might be happy to use SQLite 5.8.9 for new apps / development, but need to keep running the version of ooSQLite that's based on 3.7.13 for legacy apps, and it's possible they might even have apps that accessed several dbs, some needing one version and some the other, eg while migrating specific dbs from one version of SQLite to another. Assuming that they'd only install ooRexx once, they'd need a way of making the older apps use one version of ooSQLite while other apps (using the same ooRexx) could use a newer version. Maybe this would only mean that they'd need to rename the supplied 'ooSQLite.cls' files to, say, 'ooSQLite3-7-13.cls' and 'ooSQLite5-8-9.cls' and ::require one or both of the specified files in their app. Obviously the binaries would need to be able to coexist too. But if the classnames do not include at least the 3 (and 5) would it actually be possible to make sure that the methods etc invoked by an object would come from the right .cls and binary files? The Rexx programmer would be faced with the same choices as any other SQLite user would be faced with. But in eg C you could surely compile an app with code using one or both of the sqlite3 and sqlite5 structs, depending on which was needed for which db, and then call the version-specific entry-point? The name of the structs in SQLite is of no consequence to the Rexx programmer. So, I don't really see a problem here. The name is only significant because the 3 in it gives a clue that the version of the engine used with a particular db may matter, and therefore that any user of SQLite may need to be able to choose which engine to use for a particular db or project. I was just suggesting that such a thing needs designed into the interface at the start, so that any business user using SQLite and ooRexx can work around that problem. -- Jeremy Nicoll - my opinions are my own -- Live Security Virtual Conference Exclusive live event will cover all the ways today's security and threat landscape has changed and how IT managers can respond. Discussions will include endpoint security, mobile security and the latest in malware threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/ ___ Oorexx-devel mailing list Oorexx-devel@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/oorexx-devel
Re: [Oorexx-devel] Question ad bug-e-mails ...
Rony G. Flatscher rony.flatsc...@wu-wien.ac.at wrote: Having subscribed the bug-tracking-list I wonder, why this post was not sent by Sourceforge, hence the question, whether anyone has received that mail? (Subject: Algorithm for changestr does not mention the optional count, author: walterpachl) I got it, but the subject isn't what you say, but instead the somewhat meaningless Reference 7.4.13: Submitted By: Walter Pachl (walterpachl) Assigned to: Nobody/Anonymous (nobody) Summary: Reference 7.4.13 Initial Comment: Algorithm for changestr does not mention the optional count Also... I only see single copies of posts to the tracker and I've been subscribed for several years. -- Jeremy Nicoll - my opinions are my own -- Live Security Virtual Conference Exclusive live event will cover all the ways today's security and threat landscape has changed and how IT managers can respond. Discussions will include endpoint security, mobile security and the latest in malware threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/ ___ Oorexx-devel mailing list Oorexx-devel@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/oorexx-devel
Re: [Oorexx-devel] ooSQLiteDB name change to ooSQLiteDbConn or ?
hakan hexi...@users.sourceforge.net wrote: No offense, but... and none taken. Isn't it great that someone take their time to implement the interface to SQLite when oneself is not talent/or lack the knowledge how to do it !. Yes, absolutely. If SQLite will evolve and that is delayed/not implemented in ooSQLite, well you can always do the implementation yourself, No, I can't. Before this package was announced I was already investigating SQLite with a view to using it via a command line interface, but I certainly don't have the skills needed to integrate it with ooRexx. but as I see it, you can't demand that it should be incorporated in ooSQLite. I'm not /demanding/ anything. But it seems to me that extending ooRexx's capabilities to include SQLite is a BIG thing, bearing in mind just how much SQLite is used. That should mean that the package is attractive to people who may use it in production situations... but that also means those users may have greater expectations of the ease with which - say - apps using it can readily change from one version of SQLite to another, or run using both versions in parallel for (say) regression testing. If we want ooRexx's capabilities to be taken seriously then significant packages like this should be designed to support proper use and testing of apps that use it. That kind of support normally is something one have to pay for, so building a commercial ooREXX application with ooSQLite, one can't demand anything from the developers of ooREXX/ooSQLite. I'm not suggesting anyone should support an app written in ooRexx SQLite. SQLIte support is provided elsewhere anyway. I am however suggesting that some thought should be given to the real life requirements of users of such a package. The developed application is one owns responsibility and any demands should be solved by oneself ... Yes, if one has accepted a mature but inflexible product. But Mark has asked for comments on the way the package is being evolved, so I provided some. -- Jeremy Nicoll - my opinions are my own -- Live Security Virtual Conference Exclusive live event will cover all the ways today's security and threat landscape has changed and how IT managers can respond. Discussions will include endpoint security, mobile security and the latest in malware threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/ ___ Oorexx-devel mailing list Oorexx-devel@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/oorexx-devel
