From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (qmail 15513 invoked by alias); 29 Jul 2013 13:36:08 -0000 Mailing-List: contact cygwin-help@cygwin.com; run by ezmlm Precedence: bulk List-Id: List-Subscribe: List-Archive: List-Post: List-Help: , Sender: cygwin-owner@cygwin.com Mail-Followup-To: cygwin@cygwin.com Received: (qmail 15491 invoked by uid 89); 29 Jul 2013 13:36:07 -0000 X-Spam-SWARE-Status: No, score=-0.5 required=5.0 tests=AWL,BAYES_50,KHOP_RCVD_UNTRUST,KHOP_THREADED,RCVD_IN_DNSWL_LOW,RCVD_IN_HOSTKARMA_NO,RDNS_NONE,SPF_NEUTRAL autolearn=no version=3.3.1 Received: from Unknown (HELO bureau82.ns.utoronto.ca) (128.100.132.182) by sourceware.org (qpsmtpd/0.84/v0.84-167-ge50287c) with ESMTP; Mon, 29 Jul 2013 13:36:06 +0000 Received: from [192.168.0.106] (75-119-229-27.dsl.teksavvy.com [75.119.229.27]) (authenticated bits=0) by bureau82.ns.utoronto.ca (8.13.8/8.13.8) with ESMTP id r6TDZsu1014147 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO) for ; Mon, 29 Jul 2013 09:35:57 -0400 Message-ID: <51F66FB9.6000802@cs.utoronto.ca> Date: Mon, 29 Jul 2013 13:43:00 -0000 From: Ryan Johnson User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:17.0) Gecko/20130620 Thunderbird/17.0.7 MIME-Version: 1.0 To: cygwin@cygwin.com Subject: Re: child (xterm) fork failure as it loads to different address References: <51F65369.9020001@gmail.com> In-Reply-To: Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-SW-Source: 2013-07/txt/msg00649.txt.bz2 http://cygwin.com/acronyms/#TOFU On 29/07/2013 8:15 AM, Ariel Burbaickij wrote: > OK, thank, you, so usual suspects. Now, removing, antivirus and stuff > will not be possible in this particular environment but adjustments in > the configuration are well possible, provided I will be able to prove > to administrators that troubles, indeed, stem from antivirus and co. > Now, I see in the FAQ in 4.42 section that these troubles were traced > and attributed to antiviri programs. Any more details about how they > were traced exactly, so that I can re-trace them too and provide a > proof, if needed? The proof usually goes something like this: 1. People report fork() failures on the list, and a correlation is noted between those failures and presence of app/antivirus X. 2. It is confirmed (or at least considered highly probable) that X performs dll injection, the root cause of these sorts of fork() failures. 3. Somebody tries disabling/removing X and the fork() failures go away. 4. X gets added to BLODA and reports of fork() failures, not attributable to X, disappear from the list. Eventually the process repeats when Y appears. You could also try enabling BLODA detection [1] and see what turns up, or run the NirSoft DLL injection detector [2]. [1] http://cygwin.com/ml/cygwin/2012-02/msg00797.html [2] http://www.nirsoft.net/utils/injected_dll.html > Now, this is for one thing. Another one, is the > possibility to run Windows 7 (in my case) or any Windows OS, down to > and including NT in POSIX-compatible "mode". From www.cygwin.com: > The Cygwin DLL currently works with all recent, commercially released > x86 32 bit and 64 bit versions of Windows, starting with Windows XP SP3. So no, Windows NT will not work. Neither will Win95/98/2000. Nor will XP SP1/SP2. But if your admins are really so worried about viruses, they won't let you run those ancient operating systems anyway, because MS no longer pushes security patches for them. Given that you seem to have your choice of OS, though, you might try 64-bit cygwin. The sheer amount of address space that becomes available, plus some careful design decisions for placement of cygwin-related dlls in that space, reduces the risk of fork failures considerably. I don't think anybody has reported a fork failure on cygwin64 yet (knock on wood). I recently migrated to 64-bit cygwin with a new Win7/64 install myself, and so far have not had to disable Windows Defender; the latter was a recurring source of trouble for my previous 32-bit cygwin install on Win7/64. If you can't get cygwin64 running, you may be able to convince your admins to whitelist cygwin apps with the AV solution; that has a small chance of stopping the dll injection and allowing fork() to succeed. Don't get your hopes up, though: most AV leave the dll injection in place even when completely disabled system-wide, and just tell the dlls not to do anything (other than stepping on cygwin's toes, of course). > Is this step expected to > solve or at least alleviate all or at least some the troubles about > the square peg of fork() into the round whole of Windows? cygwin64 may do that... downgrading your OS will not. Ryan -- Problem reports: http://cygwin.com/problems.html FAQ: http://cygwin.com/faq/ Documentation: http://cygwin.com/docs.html Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple