Re: [Firebird-devel] Protection from symlinks

2016-05-10 Thread Alex Peshkoff
On 05/07/2016 05:00 PM, Dimitry Sibiryakov wrote: > Hello, All. > > In path_utils.h there is a comment: > >> /** isSymLink returns true if the given path is symbolic link, and >> false if not. >> Use of this links may provide way to override system security. >>

Re: [Firebird-devel] Wildcards in config include clause

2016-05-10 Thread Alex Peshkoff
On 05/07/2016 06:42 PM, Dimitry Sibiryakov wrote: > Hello, All. > > Do it really desirable to allow wildcards in any part of path? > Consider, for example, following: > > include ../../*/*/*/* > If as a result not too much files (and that files are really useful one) are included - wh

Re: [Firebird-devel] Multiple instances of Firebird 3 on linux

2016-05-10 Thread Alex Peshkoff
On 05/09/2016 06:06 PM, Paul Reeves wrote: > I've compiled firebird 3 with prefix=/opt/firebird3 and then installed > it into several sub-directories based on port numbers. > > This command _ought_ to work: > > /opt/firebird3/fb3056/bin/firebird \ >-p 3056 \ >-e /opt/firebird3/fb3

Re: [Firebird-devel] HowTo for implementing a dbcrypt plugin

2016-05-10 Thread Alex Peshkoff
On 05/09/2016 07:42 PM, Ralf Jansen wrote: > Hi, > > i’m struggle to find any documentation about howto write a dbcrypt plugin. > I found the dbcrypt example(s). And with some work I might get a working > plugin but I does not feel right. > This is about security and not some random subject where

Re: [Firebird-devel] Wildcards in config include clause

2016-05-10 Thread Dimitry Sibiryakov
10.05.2016 10:42, Alex Peshkoff wrote: > If as a result not too much files (and that files are really useful one) > are included - why not. (Certainly with this particular sample using > ".." that's hardly possible). > Something like > > include plugins/vendors/*/*.cnf > > appears really useful.

Re: [Firebird-devel] Wildcards in config include clause

2016-05-10 Thread Alex Peshkoff
On 05/10/2016 03:21 PM, Dimitry Sibiryakov wrote: > 10.05.2016 10:42, Alex Peshkoff wrote: >> If as a result not too much files (and that files are really useful one) >> are included - why not. (Certainly with this particular sample using >> ".." that's hardly possible). >> Something like >> >> inc

Re: [Firebird-devel] Wildcards in config include clause

2016-05-10 Thread Dimitry Sibiryakov
10.05.2016 14:31, Alex Peshkoff wrote: > If directory is changed that can mean new files in it to be included. I don't quite understand it. To cache is added every file in every directory that matches pattern. Say, in firebird.conf file there is line "include /usr/firebird/plugins/vendors

Re: [Firebird-devel] Wildcards in config include clause

2016-05-10 Thread Alex Peshkoff
On 05/10/2016 03:44 PM, Dimitry Sibiryakov wrote: > 10.05.2016 14:31, Alex Peshkoff wrote: >> If directory is changed that can mean new files in it to be included. > I don't quite understand it. To cache is added every file in every > directory that > matches pattern. > Say, in firebird.co

Re: [Firebird-devel] Wildcards in config include clause

2016-05-10 Thread Dimitry Sibiryakov
10.05.2016 14:53, Alex Peshkoff wrote: >> What changes in /usr can make new files to be included? Why "/usr" is >> cached at all if >> >this is not a file? >> > > cd /usr > rm -rf firebird > tar xf firebird.image.tar It is fine, but now, actually, any change in /usr will make config to be

Re: [Firebird-devel] Wildcards in config include clause

2016-05-10 Thread Alex Peshkoff
On 05/10/2016 04:03 PM, Dimitry Sibiryakov wrote: > 10.05.2016 14:53, Alex Peshkoff wrote: >>> What changes in /usr can make new files to be included? Why "/usr" is >>> cached at all if this is not a file? >> cd /usr >> rm -rf firebird >> tar xf firebird.image.tar > It is fine,

Re: [Firebird-devel] Wildcards in config include clause

2016-05-10 Thread Dimitry Sibiryakov
10.05.2016 15:21, Alex Peshkoff wrote: >> > May be ConfigFile::include() should cut into pieces not whole path, >> > but only part with >> >wildcards?.. >> > > no Why? -- WBR, SD. -- Mobile security can be en

Re: [Firebird-devel] Wildcards in config include clause

2016-05-10 Thread Alex Peshkoff
On 05/10/2016 04:29 PM, Dimitry Sibiryakov wrote: > 10.05.2016 15:21, Alex Peshkoff wrote: May be ConfigFile::include() should cut into pieces not whole path, but only part with wildcards?.. >> no > Why? > OK, replacing all firebird in /usr is not realistic example. B

Re: [Firebird-devel] Wildcards in config include clause

2016-05-10 Thread Dimitry Sibiryakov
10.05.2016 15:37, Alex Peshkoff wrote: > I do: > cd /opt/firebird > mv conf conf2 > mv conf1 conf > > Is it enough? Won't it change timestamp of conf and any file inside of it? -- WBR, SD. -- Mob

Re: [Firebird-devel] Wildcards in config include clause

2016-05-10 Thread Alex Peshkoff
On 05/10/2016 04:42 PM, Dimitry Sibiryakov wrote: > 10.05.2016 15:37, Alex Peshkoff wrote: >> I do: >>cd /opt/firebird >>mv conf conf2 >>mv conf1 conf >> >> Is it enough? > Won't it change timestamp of conf and any file inside of it? > It will change timestamp of conf b

[Firebird-devel] Assertion in HEAD

2016-05-10 Thread Dimitry Sibiryakov
Hello, All. Debug build of current HEAD on Win64 fails with following stack trace. > msvcr120d.dll!07f904db7642()Unknown > msvcr120d.dll!07f904ee2044()Unknown > engine12.dll!fb_assert_impl(const char * msg, const char * file, int > line, bool do_ab

Re: [Firebird-devel] Wildcards in config include clause

2016-05-10 Thread Dimitry Sibiryakov
10.05.2016 15:48, Alex Peshkoff wrote: > It will change timestamp of conf For current ConfigCache it will be enough to reload all config files inside of it: it drops whole cache at single timestamp mismatch. -- WBR, SD. ---

Re: [Firebird-devel] Wildcards in config include clause

2016-05-10 Thread Alex Peshkoff
On 05/10/2016 04:59 PM, Dimitry Sibiryakov wrote: > 10.05.2016 15:48, Alex Peshkoff wrote: >> It will change timestamp of conf > For current ConfigCache it will be enough to reload all config files > inside of it: it > drops whole cache at single timestamp mismatch. > Well, I stop with this a

Re: [Firebird-devel] Install Firebird en Devuan

2016-05-10 Thread Alex Peshkoff
On 05/09/2016 11:41 PM, Ismael L. Donis Garcia wrote: > When trying to install Firebird 3 in devuan, I see that this distribution is > not included in the script linux. Nor is it in version 2.5.6 > Could someone include it in the script? > You need only add in all script: > > detectDistro() { > >

Re: [Firebird-devel] Assertion in HEAD

2016-05-10 Thread Dimitry Sibiryakov
10.05.2016 15:55, Dimitry Sibiryakov wrote: > Any idea what's wrong with these lines? It looks like variable "temporary_key keys[MAX_LEVELS];" has size more than 128kb. -- WBR, SD. -- Mobile security can be e

Re: [Firebird-devel] Install Firebird en Devuan

2016-05-10 Thread Ismael L. Donis Garcia
- Original Message - From: "Alex Peshkoff" To: Sent: Tuesday, May 10, 2016 10:24 AM Subject: Re: [Firebird-devel] Install Firebird en Devuan > On 05/09/2016 11:41 PM, Ismael L. Donis Garcia wrote: >> When trying to install Firebird 3 in devuan, I see that this distribution >> is >> no

Re: [Firebird-devel] Assertion in HEAD

2016-05-10 Thread Alex Peshkoff
On 05/10/2016 05:49 PM, Dimitry Sibiryakov wrote: > 10.05.2016 15:55, Dimitry Sibiryakov wrote: >> Any idea what's wrong with these lines? > It looks like variable "temporary_key keys[MAX_LEVELS];" has size more > than 128kb. > What exact digits do you get in ProbeStack() for myStack and

Re: [Firebird-devel] Assertion in HEAD

2016-05-10 Thread Dimitry Sibiryakov
10.05.2016 17:43, Alex Peshkoff wrote: > What exact digits do you get in ProbeStack() for myStack and thisLocation? thisLocation = 0x00132018 myStack = 0x00111574 But increasing this for a couple of kilobytes will only put the problem off. This procedure has much more local v

Re: [Firebird-devel] Assertion in HEAD

2016-05-10 Thread Alex Peshkoff
On 05/10/2016 06:53 PM, Dimitry Sibiryakov wrote: > 10.05.2016 17:43, Alex Peshkoff wrote: >> What exact digits do you get in ProbeStack() for myStack and thisLocation? > thisLocation = 0x00132018 > myStack = 0x00111574 > > But increasing this for a couple of kilobytes will only

Re: [Firebird-devel] Assertion in HEAD

2016-05-10 Thread Dimitry Sibiryakov
10.05.2016 18:22, Alex Peshkoff wrote: > I think that for 32-bit systems it's time to change limit to 256Kb, for > 64 - to 512Kb. Max page size doesn't depend on bitness. Thus there is no point to have different limit. I'd suggest to try https://msdn.microsoft.com/en-us/library/windows/des

Re: [Firebird-devel] Install Firebird en Devuan

2016-05-10 Thread Alex Peshkoff
On 05/10/2016 06:04 PM, Ismael L. Donis Garcia wrote: > - Original Message - > From: "Alex Peshkoff" > To: > Sent: Tuesday, May 10, 2016 10:24 AM > Subject: Re: [Firebird-devel] Install Firebird en Devuan > > >> On 05/09/2016 11:41 PM, Ismael L. Donis Garcia wrote: >>> When trying to inst

Re: [Firebird-devel] Assertion in HEAD

2016-05-10 Thread Alex Peshkoff
On 05/10/2016 07:54 PM, Dimitry Sibiryakov wrote: > 10.05.2016 18:22, Alex Peshkoff wrote: >> I think that for 32-bit systems it's time to change limit to 256Kb, for >> 64 - to 512Kb. > Max page size doesn't depend on bitness. Thus there is no point to have > different limit. I talk not only

Re: [Firebird-devel] Assertion in HEAD

2016-05-10 Thread Dimitry Sibiryakov
10.05.2016 19:23, Alex Peshkoff wrote: > builtin_frame_address() is not looking good at the first glance. > A message about it saying "Calling this function with a nonzero argument can > have unpredictable effects, including crashing the calling program" does not > provide big desire to use it (a

Re: [Firebird-devel] HowTo for implementing a dbcrypt plugin

2016-05-10 Thread Ralf Jansen
No, but now I did. That helped a lot and I should get something running. I struggled with setting up the plugin.conf a bit. The Module Parameter for a (dbcrypt) plugin seems to have no effect. Looks like the plugin must be in the plugins subfolder and the path given via the Module Parameter is ig

Re: [Firebird-devel] Assertion in HEAD

2016-05-10 Thread Dmitry Yemanov
10.05.2016 17:49, Dimitry Sibiryakov wrote: > > It looks like variable "temporary_key keys[MAX_LEVELS];" has size more than > 128kb. IMO, a proper solution would be to avoid such huge stack allocations. Either temporary key or array (or both) could grow dynamically, if required. I will take a l

Re: [Firebird-devel] Assertion in HEAD

2016-05-10 Thread Dmitry Yemanov
10.05.2016 20:38, Dimitry Sibiryakov wrote: > > May be you just didn't try to build debug build after Dmitry committed the > bigger page?.. I surely built it successfully (64-bit Linux, Debug) before committing. Dmitry --

Re: [Firebird-devel] Assertion in HEAD

2016-05-10 Thread Vlad Khorsun
10.05.2016 20:23, Alex Peshkoff wrote: > On 05/10/2016 07:54 PM, Dimitry Sibiryakov wrote: >> 10.05.2016 18:22, Alex Peshkoff wrote: >>> I think that for 32-bit systems it's time to change limit to 256Kb, for >>> 64 - to 512Kb. >> Max page size doesn't depend on bitness. Thus there is no point

[Firebird-devel] [FB-Tracker] Created: (CORE-5235) /SUPPORTLEGACYCLIENTAUTH not working on 3.0 x64 installer

2016-05-10 Thread F.D.Castel (JIRA)
/SUPPORTLEGACYCLIENTAUTH not working on 3.0 x64 installer - Key: CORE-5235 URL: http://tracker.firebirdsql.org/browse/CORE-5235 Project: Firebird Core Issue Type: Bug Componen

Re: [Firebird-devel] Wildcards in config include clause

2016-05-10 Thread Dimitry Sibiryakov
10.05.2016 16:06, Alex Peshkoff wrote: > Well, I stop with this answer cause discussion is getting useless - > please keep cache invalidation rule as is. > Imagine that inside conf there is subconf > include/opt/firebird/conf/subconf/* > and conf is renamed. I just wonder what is faster:

Re: [Firebird-devel] Install Firebird en Devuan

2016-05-10 Thread Ismael L. Donis Garcia
- Original Message - From: "Alex Peshkoff" To: Sent: Tuesday, May 10, 2016 1:00 PM Subject: Re: [Firebird-devel] Install Firebird en Devuan > On 05/10/2016 06:04 PM, Ismael L. Donis Garcia wrote: >> - Original Message - >> From: "Alex Peshkoff" >> To: >> Sent: Tuesday, May 10

Re: [Firebird-devel] Wildcards in config include clause

2016-05-10 Thread Adriano dos Santos Fernandes
Em 10/05/2016 18:22, Dimitry Sibiryakov escreveu: > 10.05.2016 16:06, Alex Peshkoff wrote: >> Well, I stop with this answer cause discussion is getting useless - >> please keep cache invalidation rule as is. >> Imagine that inside conf there is subconf >> include/opt/firebird/conf/subconf/* >

Re: [Firebird-devel] Wildcards in config include clause

2016-05-10 Thread Michal Kubecek
On Tue, May 10, 2016 at 04:48:04PM +0300, Alex Peshkoff wrote: > On 05/10/2016 04:42 PM, Dimitry Sibiryakov wrote: > > 10.05.2016 15:37, Alex Peshkoff wrote: > >> I do: > >>cd /opt/firebird > >>mv conf conf2 > >>mv conf1 conf > >> > >> Is it enough? > > Won't it change t