X-Recipient: archive-cygwin@delorie.com
X-SWARE-Spam-Status: No, hits=-0.1 required=5.0	tests=AWL,BAYES_50,TW_YG,T_RP_MATCHES_RCVD
X-Spam-Check-By: sourceware.org
To: cygwin@cygwin.com
Subject: BLODA detection (was Re: Debugging help for fork failure: resource temporarily unavailable)
References: <4D7BB586.4050003@dronecode.org.uk> <4D7F6F77.1000306@ece.cmu.edu>
From: ht@inf.ed.ac.uk (Henry S. Thompson)
Date: Tue, 15 Mar 2011 17:47:41 +0000
In-Reply-To: <4D7F6F77.1000306@ece.cmu.edu> (Ryan Johnson's message of "Tue, 15 Mar 2011 09:53:59 -0400")
Message-ID: <f5bipvktgw2.fsf_-_@calexico.inf.ed.ac.uk>
User-Agent: Gnus/5.1008 (Gnus v5.10.8) XEmacs/21.4.21 (linux)
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
X-Edinburgh-Scanned: at treacle.ucs.ed.ac.uk    with MIMEDefang 2.60, Sophie, Sophos Anti-Virus, Clam AntiVirus
X-IsSubscribed: yes
Mailing-List: contact cygwin-help@cygwin.com; run by ezmlm
Precedence: bulk
List-Id: <cygwin.cygwin.com>
List-Unsubscribe: <mailto:cygwin-unsubscribe-archive-cygwin=delorie.com@cygwin.com>
List-Subscribe: <mailto:cygwin-subscribe@cygwin.com>
List-Archive: <http://sourceware.org/ml/cygwin/>
List-Post: <mailto:cygwin@cygwin.com>
List-Help: <mailto:cygwin-help@cygwin.com>, <http://sourceware.org/ml/#faqs>
Sender: cygwin-owner@cygwin.com
Mail-Followup-To: cygwin@cygwin.com
Delivered-To: mailing list cygwin@cygwin.com

Ryan Johnson writes:

> BTW, I found a good way to identify, if not fix, BLODA: given an app
> which loads no libraries at runtime -- such as 'ls' -- any dlls
> mentioned in /proc/$$/maps which cygcheck does not mention are
> probably dodgy. In my case, Windows Live (which I didn't think was
> even installed on my machine) has injected a WLIDNSP.DLL ("Microsoft
> Windows Live ID Namespace Provider") in all my processes.

This would be super-cool if true, but it doesn't work for me. . .

If I try, I find

 C:\Windows\system32\ntmarta.dll
 C:\Windows\SysWOW64\sechost.dll
 C:\Windows\syswow64\WLDAP32.dll

in /proc/[ls procid]/maps but not in cygcheck output, but none of
those are BLODA, right?

[Note also that maps shows many things in syswow64 which cygcheck
shows in system32, but presumably that's because cygcheck itself is a
32-bit app, is it?]

ht
-- 
       Henry S. Thompson, School of Informatics, University of Edinburgh
      10 Crichton Street, Edinburgh EH8 9AB, SCOTLAND -- (44) 131 650-4440
                Fax: (44) 131 651-1426, e-mail: ht@inf.ed.ac.uk
                       URL: http://www.ltg.ed.ac.uk/~ht/
 [mail from me _always_ has a .sig like this -- mail without it is forged spam]

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple

