From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (qmail 2164 invoked by alias); 15 Mar 2011 17:48:02 -0000 Received: (qmail 2105 invoked by uid 22791); 15 Mar 2011 17:47:59 -0000 X-SWARE-Spam-Status: No, hits=-0.1 required=5.0 tests=AWL,BAYES_50,TW_YG,T_RP_MATCHES_RCVD X-Spam-Check-By: sourceware.org Received: from treacle.ucs.ed.ac.uk (HELO treacle.ucs.ed.ac.uk) (129.215.16.102) by sourceware.org (qpsmtpd/0.43rc1) with ESMTP; Tue, 15 Mar 2011 17:47:50 +0000 Received: from nutty.inf.ed.ac.uk (nutty.inf.ed.ac.uk [129.215.33.33]) by treacle.ucs.ed.ac.uk (8.13.8/8.13.4) with ESMTP id p2FHlgFk001896 for ; Tue, 15 Mar 2011 17:47:42 GMT Received: from calexico.inf.ed.ac.uk (calexico.inf.ed.ac.uk [129.215.24.15]) by nutty.inf.ed.ac.uk (8.13.8/8.13.8) with ESMTP id p2FHlfEi023839 for ; Tue, 15 Mar 2011 17:47:42 GMT Received: from calexico.inf.ed.ac.uk (localhost [127.0.0.1]) by calexico.inf.ed.ac.uk (8.13.8/8.13.8) with ESMTP id p2FHlfme004434 for ; Tue, 15 Mar 2011 17:47:41 GMT Received: (from ht@localhost) by calexico.inf.ed.ac.uk (8.13.8/8.13.8/Submit) id p2FHlfam004430; Tue, 15 Mar 2011 17:47:41 GMT To: cygwin@cygwin.com Subject: BLODA detection (was Re: Debugging help for fork failure: resource temporarily unavailable) References: <4D7BB586.4050003@dronecode.org.uk> <4D7F6F77.1000306@ece.cmu.edu> From: ht@inf.ed.ac.uk (Henry S. Thompson) Date: Tue, 15 Mar 2011 17:52:00 -0000 In-Reply-To: <4D7F6F77.1000306@ece.cmu.edu> (Ryan Johnson's message of "Tue, 15 Mar 2011 09:53:59 -0400") Message-ID: User-Agent: Gnus/5.1008 (Gnus v5.10.8) XEmacs/21.4.21 (linux) MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Edinburgh-Scanned: at treacle.ucs.ed.ac.uk with MIMEDefang 2.60, Sophie, Sophos Anti-Virus, Clam AntiVirus X-IsSubscribed: yes Mailing-List: contact cygwin-help@cygwin.com; run by ezmlm Precedence: bulk List-Id: List-Subscribe: List-Archive: List-Post: List-Help: , Sender: cygwin-owner@cygwin.com Mail-Followup-To: cygwin@cygwin.com X-SW-Source: 2011-03/txt/msg00436.txt.bz2 Ryan Johnson writes: > BTW, I found a good way to identify, if not fix, BLODA: given an app > which loads no libraries at runtime -- such as 'ls' -- any dlls > mentioned in /proc/$$/maps which cygcheck does not mention are > probably dodgy. In my case, Windows Live (which I didn't think was > even installed on my machine) has injected a WLIDNSP.DLL ("Microsoft > Windows Live ID Namespace Provider") in all my processes. This would be super-cool if true, but it doesn't work for me. . . If I try, I find C:\Windows\system32\ntmarta.dll C:\Windows\SysWOW64\sechost.dll C:\Windows\syswow64\WLDAP32.dll in /proc/[ls procid]/maps but not in cygcheck output, but none of those are BLODA, right? [Note also that maps shows many things in syswow64 which cygcheck shows in system32, but presumably that's because cygcheck itself is a 32-bit app, is it?] ht -- Henry S. Thompson, School of Informatics, University of Edinburgh 10 Crichton Street, Edinburgh EH8 9AB, SCOTLAND -- (44) 131 650-4440 Fax: (44) 131 651-1426, e-mail: ht@inf.ed.ac.uk URL: http://www.ltg.ed.ac.uk/~ht/ [mail from me _always_ has a .sig like this -- mail without it is forged spam] -- Problem reports: http://cygwin.com/problems.html FAQ: http://cygwin.com/faq/ Documentation: http://cygwin.com/docs.html Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple