On Sat, 11 Jun 2011 10:42:58 -0500 Paul Gilmartin <paulgboul...@aim.com>
wrote:

:>On Sat, 11 Jun 2011 10:52:10 -0400, David Cole wrote:

:>>At 6/11/2011 01:29 AM, Jim Mulder wrote:
:>>>The particular documentation to which Ed refers is available only to
:>>>ISVs who are under nondisclosure.  Dave Cole is among those, and
:>>>thus he should have access to it.

:>>>For the rest of the IBM-MAIN folks, I will say that it just
:>>>describes the issue which Dave Cole has very accurately described,
:>>>and says that it has been resolved in z/OS 1.13.

:>>>Jim Mulder   z/OS System Test   IBM Corp.  Poughkeepsie,  NY

:>>Thanks Jim. I, of course, was not free to make that disclosure. I
:>>appreciate your doing so for the list's benefit.

:>But was Jim free to make that disclosure?  I would expect that
:>confidientiality clause, typical in NDAs to be bilateral.  Of
:>course, you seem pleased with Jim's action, and it's quite
:>possible, AFAIK, that Jim first contacted you privately to
:>obtain your permission to disclose that an NDA exists between
:>IBM and ColeSoft.  (Who'd be surprised?)

:>But wouldn't a FIN APAR obviate much of the cloak-and-dagger?
:>The only thing inappropriate to a FIN APAR is preannouncing the
:>particular future release.  Apparently Jim is authorized to
:>make such an announcement here.  (This in no way obligates
:>IBM, blah, blah, blah.)

Or one can write a similar program, have it fail in a similar way and open a
PMR. I fail to see why this is "super sekrit".

I was trying to find the exposure. I don't see any protected block that saves
the DCBE address and even if there was (such as the DEB having the DCB
address) system code cannot guarantee that the storage is not freed and
reassigned to a protected subpool, i.e., any supervisor code that modifies
these control blocks must do it in user key.

The only thing that I can think of is that IBM was trying to be "user
friendly" and was concerned that programmers may not have read the
instructions that DCBE's need to be in writable storage and as DCBE's may be
ignored decided that the best approach was to ignore the DCBE if not in the
PSW key.

--
Binyamin Dissen <bdis...@dissensoftware.com>
http://www.dissensoftware.com

Director, Dissen Software, Bar & Grill - Israel


Should you use the mailblocks package and expect a response from me,
you should preauthorize the dissensoftware.com domain.

I very rarely bother responding to challenge/response systems,
especially those from irresponsible companies.

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Reply via email to