Re: Got my name in the list

Hi,

Don Cohen wrote:
>I suspect that selinux prevents some tests from working.
>[...]
>I do know that the ffcall tests are affected - something like executing code from stack.

Uh oh. Isn't setting the correct permissions a distribution issue?
Trampolines and similar objects are created when calling back from C to Lisp.

The CLISP FFI testsuite should test these as well (I remember adding such tests), therefore
I'd expect the ffcall tests and CLISP FFI tests to fail or succeed similarly. If only ffcall
tests fail in SELinux, then I'd say some tests are missing from the CLISP FFI testsuite.

Do the failing/crashing tests only involve callbacks or is simply calling C from Lisp already
enough to provoke NX Stack alerts?

Perhaps it would be interesting to see what developers had to change in the runtimes of other
programming languages to not stand in the way of security improvements like stack execution
prevention etc.  I remember reading about such changes, but cannot seem to remember details. :-(

Regards,
	Jörg Höhle

------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
clisp-devel mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/clisp-devel