X-Recipient:	archive-cygwin AT delorie DOT com
X-SWARE-Spam-Status:	No, hits=-0.8 required=5.0 tests=AWL,BAYES_20,T_RP_MATCHES_RCVD
X-Spam-Check-By:	sourceware.org
Message-ID:	<4D029937.5080007@etr-usa.com>
Date:	Fri, 10 Dec 2010 14:18:47 -0700
From:	Warren Young <warren AT etr-usa DOT com>
User-Agent:	Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US; rv:1.9.2.13) Gecko/20101207 Thunderbird/3.1.7
MIME-Version:	1.0
To:	Cygwin-L <cygwin AT cygwin DOT com>
Subject:	Re: 1.7.7: rm -rf sometimes fails - race condition?
References:	<4D026815 DOT 4070606 AT gmx DOT de> <20101210182652 DOT GA27615 AT ednor DOT casa DOT cgf DOT cx> <4D027DDE DOT 1000905 AT gmx DOT de>
In-Reply-To:	<4D027DDE.1000905@gmx.de>
X-IsSubscribed:	yes
Mailing-List:	contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id:	<cygwin.cygwin.com>
List-Subscribe:	<mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive:	<http://sourceware.org/ml/cygwin/>
List-Post:	<mailto:cygwin AT cygwin DOT com>
List-Help:	<mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender:	cygwin-owner AT cygwin DOT com
Mail-Followup-To:	cygwin AT cygwin DOT com
Delivered-To:	mailing list cygwin AT cygwin DOT com

On 12/10/2010 12:22 PM, Matthias Andree wrote:
>>> Has anyone seen similar things?
>>
>> Yes and you seem to have nailed the problem - it happens when a virus checker
>> hooks into a syscall and allows it to return before completion.  I don't think
>> we want to modify Cygwin to not trust success return values from system calls.
>
> Well, I don't know a solution but I think this is unexpected behaviour.

When some bit of third-party software patches the kernel and breaks its 
API -- which includes details like "when this call returns a success 
code, it means it succeeded" -- that is going to result in unexpected 
behavior in any program that calls that syscall.

If you were to take a survey of existing Windows programs and sort them 
according to density of calls into the deepest parts of the Windows 
kernel, I'd bet Cygwin would be way over at the high-density end.  Since 
antimalware programs hook these same parts of the kernel to do their 
job, bugs in those hooks will affect Cygwin more often than most other 
Windows programs.

Cygwin doesn't -- and shouldn't -- patch around such bugs.  Cygwin 
probably contains code to work around bugs in Windows itself, but that's 
as far as it should go.

You say you've disabled your antimalware software and the problem 
persists.  I doubt you've actually gotten yourself back to a stock 
Windows configuration, but if so, you should be able to write a program 
that will show the same behavior on anyone's system.  If you can do 
that, I think a fix would shortly follow.  I'm not making promises of 
other people's resources, just making a history-based prediction.

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple

- Raw text -