-----Original Message-----
From: IBM Mainframe Discussion List [mailto:ibm-m...@bama.ua.edu] On
Behalf Of Binyamin Dissen
Sent: Wednesday, September 23, 2009 10:36 AM
To: IBM-MAIN@bama.ua.edu
Subject: Re: Long parms ... again (was: Reading DD card information)

On Wed, 23 Sep 2009 11:28:05 -0400 "Thompson, Steve"
<steve_thomp...@stercomm.com> wrote:

:>-----Original Message-----
:>From: IBM Mainframe Discussion List [mailto:ibm-m...@bama.ua.edu] On
:>Behalf Of Binyamin Dissen
:>Sent: Wednesday, September 23, 2009 10:07 AM
:>To: IBM-MAIN@bama.ua.edu
:>Subject: Re: Long parms ... again (was: Reading DD card information)
:>You are missing the point.

:>The APF program was written to the spec that the parameter will never
be
:>more
:>than 100 characters, and it was enforced by JCL.

:><SNIP>

:>What about the principle that you do not use KEY0 or SUPSTATE when it
is
:>not needed?

:>The PARM info that is passed is not in FETCH protected storage.
:>Therefore, you should not have to be in KEY0 to use that storage.

Irrelevant.

:>Granted, if you have set things via the PPT, you probably set up this
:>particular APF program wrong all the way around. So is the program
:>written incorrectly -- should it start out in KEYUSER (8) and then as
:>needed switch to KEY0? 

Ditto.

:>Should it start in SUPSTATE and do SPKA to KEY0 when needed, otherwise
:>be in some other key?

Ditto.

:>So, when doing a storage move, it is upon the program to ensure that
it
:>does not overflow the receiving area (especially true for APF
programs).

All this is irrelevant, as the program was written according to
documented
API. You want to change the API without ensuring that the program will
be
changed to support the new API.

<SNIP>

Binyamin:

Might I suggest that you are being a bit myopic? Or perhaps suffering
from tunnel vision?

APF programs are to be written to a higher standard. 

>From what you have written, you believe that if someone passes an APF
program you have written, an invalid parm, that program should accept
that as gospel and go clobber some part of the address space (say the
JSCB, or change the ASCBSENV, etc.) and give the caller authorities they
should not have, right?

Regards,
Steve Thompson

-- Opinions expressed by this poster do not necessarily reflect those of
poster's employer --

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Reply via email to