October 2009 - Darwin-dev - lists.apple.com

Re: Crash reporter starting stack trace
by Terry Lambert 06 Oct '09

06 Oct '09

site_archiver(a)lists.apple.com Delivered-To: darwin-dev(a)lists.apple.com I can't seem to find much info on ASLR on OS X. Is it synonymous with 'position-independent code,' and 'enabling ASLR' == the -pie ld flag? There's a lot of safety stuff there that people tend not to use. 8-). -- Terry _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.app… On Oct 6, 2009, at 2:12 PM, Dave Keck wrote: PS: It works for your main app only because you have not enabled ASLR for Yes, -pie; you can only use it with code compiled as PIC, for obvious reasons. The ld man page has better detail. If you run your code as 64 bit, you will also automatically get NX data and stacks; you can request this for i386, but too much commercial 32 bit code breaks if it's on by default there, so you have to specify it as a segment flag for a stack segment you provide, or you have to vm_protect() yourself. Whether it's enabled is controllable by the kern.nx sysctl value (1 is enabled, which is the default). This is controlled by the VM_PROT_EXECUTE bit on pmap creation. This has basically been supported since 10.4.4. This email sent to site_archiver(a)lists.apple.com

1 0

Re: Crash reporter starting stack trace
by Dave Keck 06 Oct '09

06 Oct '09

site_archiver(a)lists.apple.com Delivered-To: darwin-dev(a)lists.apple.com Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:sender:received:in-reply-to :references:from:date:x-google-sender-auth:message-id:subject:to:cc :content-type; bh=GMfeeRgCAw1yCoL8h1YoKAetyS6sH81Fi3FR0ju5c34=; b=gCIsM//Iq1F7Boqj9SVhiL1CxXZawsziWYiKff4gpazRGyU0ZPZYKJQRaEsMmBQJiB HOak0/2jvTfvPdUoxRx+aaQXBBiu2p9oqMLV0iwXh2thOsCx8qAbn43HuFS9ggh9XAxy 5h6K3ij7Fi1UrmC1ByRSGGOhDYCHXm+64Ifn4= Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:sender:in-reply-to:references:from:date :x-google-sender-auth:message-id:subject:to:cc:content-type; b=XPVokcn2ZAiMkBiL7D01F4tYxJX6IpgwKX5n0dZIbJkBhEtGvtrByrDygNEU13sGGO mHJEA9FTxG7M7UyelXcQrRRgZ/LQ4LnIwXmUjaXfrVtVHjiswLUFsGdty7p0XEgzhKYN kl58uqhl6DoJTnIs9HIGZbaUpIzpgALAfk5Og= > PS: It works for your main app only because you have not enabled ASLR for I can't seem to find much info on ASLR on OS X. Is it synonymous with 'position-independent code,' and 'enabling ASLR' == the -pie ld flag? _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.app… This email sent to site_archiver(a)lists.apple.com

1 0

Re: How to work on case-sensitive projects?
by Kevin Van Vechten 06 Oct '09

06 Oct '09

site_archiver(a)lists.apple.com Delivered-To: darwin-dev(a)lists.apple.com On Oct 6, 2009, at 12:09 PM, Allen Curtis wrote: Or, you could do your work on an HFSX partition with case sensitivity enabled using either Disk Utility, diskutil(8), or hdiutil(1) (for disk images). Is it possible to create a file based, file system which can then be mounted and used. Sort of like a writable ISO. Yes, you can create a disk image (.dmg) using Disk Utility or hdiutil formatted as HFSX with case sensitivity enabled. _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.app… This email sent to site_archiver(a)lists.apple.com

1 0

Re: How to work on case-sensitive projects?
by Allen Curtis 06 Oct '09

06 Oct '09

site_archiver(a)lists.apple.com Delivered-To: darwin-dev(a)lists.apple.com Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:received:received:cc:message-id:from:to :in-reply-to:content-type:content-transfer-encoding:mime-version :subject:date:references:x-mailer; bh=SnBljz0H73lw1FxEARq9Oe2ogWHi5W6rZQZRjcHJZhs=; b=Ry21YBEGeYWrTH1v22jLrEC2jrPzY7z6voYoIpgVeoYccgK+zG35IXaplCiL+JMW/6 xgteV/bOGph5SHXEqHatO4KDzhdok9DHpRcq79Rtq3QwlhbwiLFBTM6ehiN1mV8mp23G 9k3DH4O/4PCzwN2UACY4vtuYndZKO836UT5i4= Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=cc:message-id:from:to:in-reply-to:content-type :content-transfer-encoding:mime-version:subject:date:references :x-mailer; b=vW50Vy5g+AQl5IVU/Af58q4sBm4jQMTVadeHFanYmrKsJ2klxBosCufqen85r1PwrZ S0cHl6ShVkInXc/9AaRNUABeHGJrcwhPrynpNr+TmOGBZIC01scRQ+iEOByHV/ik9ymk TxqTCOMvZosvxT8AnBQV7oukvo4LcTqowTHYI= Example: foobar.c FOOBAR.c svn mv ... (yes, this is a serious recommendation). Thanks Allen _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.app… I am trying to work on a project which contains files whose names only differ in case. I ran into this problem when checking the source code out from Subversion. My investigation of the problem indicates that the OS-X filesystem is not case sensitive. (which I found odd for a UNIX based system) Is there a way to work around this problem? Or, you could do your work on an HFSX partition with case sensitivity enabled using either Disk Utility, diskutil(8), or hdiutil(1) (for disk images). Is it possible to create a file based, file system which can then be mounted and used. Sort of like a writable ISO. This email sent to site_archiver(a)lists.apple.com

1 0

Re: How to work on case-sensitive projects?
by Jamison Hope 06 Oct '09

06 Oct '09

site_archiver(a)lists.apple.com Delivered-To: darwin-dev(a)lists.apple.com On Oct 6, 2009, at 2:58 PM, Allen Curtis wrote: Hello, Example: foobar.c FOOBAR.c Right, HFS+ is case-preserving but case-insensitive: http://support.apple.com/kb/HT1410 -- Jamison Hope The PTR Group www.theptrgroup.com _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.app… I am trying to work on a project which contains files whose names only differ in case. I ran into this problem when checking the source code out from Subversion. My investigation of the problem indicates that the OS-X filesystem is not case sensitive. (which I found odd for a UNIX based system) Is there a way to work around this problem? Use a case sensitive file system. Have a disk partition formatted as UFS, or a UFS-formatted disk image and do your svn checkout there. I don't think Disk Utility can create a UFS disk image, but hdiutil can. http://codesnippets.joyent.com/posts/show/2084 This email sent to site_archiver(a)lists.apple.com

1 0

Re: How to work on case-sensitive projects?
by Eli Bach 06 Oct '09

06 Oct '09

site_archiver(a)lists.apple.com Delivered-To: darwin-dev(a)lists.apple.com Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:received:received:subject:mime-version :content-type:from:in-reply-to:date:content-transfer-encoding :message-id:references:to:x-mailer; bh=jgS2Wxz+jQt5JfENB8hfz448RC9LVwPpMis2+azQVnA=; b=rzwQavVucBSpHQFH46HgQxjh9pfuojU5g7Zptzn65uMooTG85QNbWYtSK4hCKEHfZT 1Dt5MDRbPhRrRXqKU6XjeI/6B5tXZT9ogNgxsU7axCfeBdbHWArId7YpfI6g0OcfUnvE 3NsjhLXPVnQxYsEQUu8OQhhXFXnQpxW16syZc= Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=subject:mime-version:content-type:from:in-reply-to:date :content-transfer-encoding:message-id:references:to:x-mailer; b=a59fvrmHD5/WOEjazDg1VgXwb+e3SZTvgv8Tl3kSPYxM/bQWCTWRuSQn05ZKUj8cf8 JMt5C9+atAHOIIPMddWtzyjN3tQfOgS1FX6LO/p87FrQTSOz0hfK5q/UAYW0gqB/voy2 A2tUUQMSWZAB5/mARR5AkzuOThzWPDphnIM+E= On Oct 6, 2009, at 12:58 PM, Allen Curtis wrote: Hello, Example: foobar.c FOOBAR.c Is there a way to work around this problem? Thanks Allen Eli _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.app… I am trying to work on a project which contains files whose names only differ in case. I ran into this problem when checking the source code out from Subversion. My investigation of the problem indicates that the OS-X filesystem is not case sensitive. (which I found odd for a UNIX based system) You could create a r/w disk image formatted with a case-sensitive file system, such as case-sensitive HFS+, then unpack/build the sources on that filesystem. This email sent to site_archiver(a)lists.apple.com

1 0

Re: How to work on case-sensitive projects?
by Kevin Van Vechten 06 Oct '09

06 Oct '09

site_archiver(a)lists.apple.com Delivered-To: darwin-dev(a)lists.apple.com On Oct 6, 2009, at 11:58 AM, Allen Curtis wrote: Example: foobar.c FOOBAR.c svn mv ... (yes, this is a serious recommendation). Kevin _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.app… I am trying to work on a project which contains files whose names only differ in case. I ran into this problem when checking the source code out from Subversion. My investigation of the problem indicates that the OS-X filesystem is not case sensitive. (which I found odd for a UNIX based system) Is there a way to work around this problem? Or, you could do your work on an HFSX partition with case sensitivity enabled using either Disk Utility, diskutil(8), or hdiutil(1) (for disk images). This email sent to site_archiver(a)lists.apple.com

1 0

How to work on case-sensitive projects?
by Allen Curtis 06 Oct '09

06 Oct '09

site_archiver(a)lists.apple.com Delivered-To: darwin-dev(a)lists.apple.com Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:received:received:message-id:from:to :content-type:content-transfer-encoding:mime-version:subject:date:cc :x-mailer; bh=JrxLh2k+3huKExtV5e4zq/VyjN8vtRBceGNuJ/h3URM=; b=j2xjCFK+n088v7t2D3AbsqQiPsBYSXsW5Y+vOhEQrB56HubTm7WOXIC4Twp1JAxj4Y Ku/3T4NvzoGncuHm1u3GYlyG5K9meaO3s0m9r4R//5J60e7R9/7ybYAeVPlfZHh1xvDX uZWeheYgPyZKpqz7ARRLd4oTY7oAKBLIfr5hA= Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=message-id:from:to:content-type:content-transfer-encoding :mime-version:subject:date:cc:x-mailer; b=r2v6oMf3JwF+iQ0oCO3i7zLkszURVe3Xg7+wCzzpv+4Th+C33qSUgkXRrTTFHv/UE7 E52/ZZHdm5tAW3Nv3Lg9I+q7T2e4WxoXvx+Zt7kmkISOyLlmoANAEDaeWJl9Ly1diTDV j6BEYYMCXTWUR3+yS+b7phNc3PTZ6Ohod0LL0= Hello, Example: foobar.c FOOBAR.c Is there a way to work around this problem? Thanks Allen _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.app… I am trying to work on a project which contains files whose names only differ in case. I ran into this problem when checking the source code out from Subversion. My investigation of the problem indicates that the OS-X filesystem is not case sensitive. (which I found odd for a UNIX based system) This email sent to site_archiver(a)lists.apple.com

1 0

Re: Crash reporter starting stack trace
by Terry Lambert 06 Oct '09

06 Oct '09

site_archiver(a)lists.apple.com Delivered-To: darwin-dev(a)lists.apple.com I told you this before... -- Terry _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.app… On Oct 6, 2009, at 10:25 AM, Arnab Ganguly <aganguly01(a)gmail.com> wrote: Hi All, Some inputs required. When an application crashes, what is the starting stack address Crashreporter gets as? Whatever is in the %esp/%rbp within the thread state struucture for each thread at the time the mach crash exception is thrown. We developed a similar crash app but when we compare the stack trace with the Crashreporter's there is a mismatch with initial stack addresses but after some traces it matches. Specially the traces very much internal to the system dynamic libraries doesn't match.Addresses related to Application it matches. Any inputs or pointers would be great help. That's because libraries are loaded at different locations on different machines and you still are not taking this into account with your crash report architecture, where you send the data back to your server for symbolication. Unless you save off specific task address space mapping locations for each, as part of the information you send back to your server, then your server will have different base addresses for the libraries and frameworks and therefore be unable to decode them properly. PS: It works for your main app only because you have not enabled ASLR for your app; if it is a network client or server, your app is likely vulnerable to buffer overflow and other attacks based on the fixed location of your code. Such an attack would work cookie-cutter fashion everywhere your software is deployed. By varying the address where it's loaded, you make it so an attack that works against one machine won't (statistically speaking) work against others. Admittedly, varying the location where system libraries are loaded is only protection if your app doesn't always load a vtable pointing at framework entry points into the same location on every machine, so that the same call sites exist everywhere (it kind of defeats the purpose if you do that in fact). This email sent to site_archiver(a)lists.apple.com

1 0

Crash reporter starting stack trace
by Arnab Ganguly 06 Oct '09

06 Oct '09

site_archiver(a)lists.apple.com Delivered-To: darwin-dev(a)lists.apple.com Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:received:date:message-id:subject :from:to:content-type; bh=ph+2HQJAkPehOD524yTp9isA8+6RibjWnX5A1UgTeT0=; b=c8mOdDX3xqdRlFjILaDPwB/lxgXhiiWvbDjriCgTCelMcIjsG0kUFrO48pPZioELl2 qDB+Tn+/rNr8TxDidjpzbObv8EWIyYMa9sdHFUmoQeocmWE6jOhpE60hAxM11fNRjNB0 xga1a8Bl5SfZVjpR552ADdEm/7zm7hLCqEI2I= Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:date:message-id:subject:from:to:content-type; b=faceCuJ3Pf/LVwc04Hj5nJoekEcGACveCM5rD5ZppUha0vSwmFnruNHCYFnP5+gh6s gB0DzLOCQotTsQte8/guUUxIgAJ6gX9LVl8Mr8sY7S8Urk/BMslzq7bhDxqkHQwVgxqf /CSWW9F1EZXvltHZ7PpqicBLo/x3F1rHekVzc= _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.app… This email sent to site_archiver(a)lists.apple.com

1 0