Path: ...!eternal-september.org!feeder3.eternal-september.org!news.eternal-september.org!.POSTED!not-for-mail
From: Simon Clubley <clubley@remove_me.eisner.decus.org-Earth.UFP>
Newsgroups: comp.os.vms
Subject: Re: A meditation on the Antithesis of the VMS Ethos
Date: Tue, 23 Jul 2024 12:20:52 -0000 (UTC)
Organization: A noiseless patient Spider
Lines: 32
Message-ID: <v7o773$16me7$1@dont-email.me>
References: <rjlp9jlpbrokm8bpi915s43pidb52s7m9c@4ax.com> <v7j0fo$3k1u$1@dont-email.me> <v7ljkj$ktou$2@dont-email.me> <v7lkqb$l8ve$1@dont-email.me> <v7mtal$se4i$8@dont-email.me>
MIME-Version: 1.0
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: 8bit
Injection-Date: Tue, 23 Jul 2024 14:20:52 +0200 (CEST)
Injection-Info: dont-email.me; posting-host="388f2b4cca7686bad31409323f223ca2";
	logging-data="1268167"; mail-complaints-to="abuse@eternal-september.org";	posting-account="U2FsdGVkX19XxGTJhEhicWrx9Vmv74BeWOGkAZqw7fg="
User-Agent: slrn/0.9.8.1 (VMS/Multinet)
Cancel-Lock: sha1:RLM6wSEYnJVVx/OxAqwNUvVMpAw=
Bytes: 2510

On 2024-07-22, Lawrence D'Oliveiro <ldo@nz.invalid> wrote:
> On Mon, 22 Jul 2024 08:54:36 -0400, Arne Vajh�j wrote:
>
>> It was config for and impacting behavior of kernel code.
>
> And it was not subject to the configuration option for turning off 
> automatic updates. Updates for these files were forced through anyway.

Un-bloody-believable. :-( :-(

I hope this doesn't turn out to be some clueless cretin who thought
they knew better than anyone else when creating an update and have now
just discovered the hard way they did not.

I read somewhere the file that got pushed had nulls in it and that the
file that got pushed was not identical to the one that was tested. :-(

Also turns out their fully-privileged kernel mode driver didn't do the
proper level of validation on this file. (So once again, we are back to
clueless cretin who thought they knew better than anyone else, but only
this time we are talking about the kernel-mode driver writer. :-( )

And no, that is _NOT_ with the benefit of hindsight. When you are writing
this kind of code, you don't trust _anything_ external (or even your own
code :-) ), and you instead validate and perform cross-checks accordingly.
And yes, this _is_ standard practice for any code I write.

Simon.

-- 
Simon Clubley, clubley@remove_me.eisner.decus.org-Earth.UFP
Walking destinations on a map are further away than they appear.