Apple

On 19 sept. 2012, at 22:50, Michael Smith wrote:

On Sep 18, 2012, at 2:48 PM, comex wrote:

There are a variety of possible threat models here, with varying
levels of attacker interest/experience (imagine if your app was known
to be installed on some political target's computer); but more
importantly, it's not like this is a fundamental tradeoff between
security and performance. It's not hard to implement a hash table or
just an array, as I said, and have the cost of looking the structure
up be almost negligible compared to, say, the system call overhead, so
you should do so and avoid the entire security can of worms.

It's not necessary to implement a new datastructure at all.

One of the canonical ways to handle this is to vend a unique handle (a simple incrementing counter is often sufficient), and then use an OSDictionary to maintain the binding between the handle and whatever OSObject you're using to hold your data.

= Mike

-----------

Jean Suisse

Institut de Chimie Moléculaire de l’Université de Bourgogne
(ICMUB) — UMR 6302

U.F.R. Sciences et Techniques, Bâtiment Mirande
Aile B, bureau 413
9, avenue Alain Savary — B.P. 47870
21078 DIJON CEDEX