DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:from:to:subject:date:message-id:mime-version
	:content-type; q=dns; s=default; b=mBJOjlQ0WJRBd673WvITVI02OC963
	PAK7Z98GUO476oS5FZmcc7RET8ov3CGbpI/Hya/CaIrYvvPZUUxSLcsThH4JuMqD
	DWNRGfa1jZXCmmnW2Fp5MovhyM80dZpoCwLaHOfLnY0rjw3NKaVMxRCBjzZAuG9f
	CtI0R5NTSQsET8=
Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
From: Weiner Michael <Michael DOT Weiner AT simons-voss DOT com>
To: "cygwin AT cygwin DOT com" <cygwin AT cygwin DOT com>
Subject: Potential BLODA issue with commercial file encryption tool
Date: Tue, 7 Nov 2017 18:48:15 +0000
Message-ID: <2FB3956C6AA03047B0818081B72B1CAF04894E27@KIKA1.simons-voss.local>
MIME-Version: 1.0
Content-Type: multipart/signed; protocol="application/x-pkcs7-signature"; micalg="sha-256"; boundary="----26A5DBFF11731B246AC797ACBBB90632"

------26A5DBFF11731B246AC797ACBBB90632
Content-Language: de-DE
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

Dear Cygwin folks,

there seems to be a BLODA issue between Cygwin and a commercial file encryp=
tion tool named "fideAS file enterprise". Since this tool was upgraded from=
 version 6.4.0.12 to 7.1.0.8 on some computers, errors like the following s=
tarted to occur. Some applications (like tmux) always reproducibly fail to =
start, others  (like bash) sometimes succeed and sometimes do not, dependin=
g on the circumstances that I have not figured out exactly yet.

--- cut ---
$ tmux
0 [main] tmux 8916 fork: child 9156 - died waiting for dll loading, errno 11
--- cut ---

In the DLL view of Sysinterals Process Explorer, I see a file named "asCryp=
toFilter64.dll" being loaded into bash.exe, mintty.exe and others. Note tha=
t there are two processes running related to fideAS, namely  "ffPrivateAgen=
t.exe" and "loadFilter.exe" . Killing them does not prevent the aforementio=
ned DLL from being loaded into newly created processes, even if the process=
 creation takes place after killing the two processes (how does this work, =
by the way?). The error also remains after killing these two processes.

Note that when the Cygwin terminal is run as administrator, asCryptoFilter6=
4.dll does not appear in the Process Explorer DLL list, and tmux works. I j=
ust figured that out right away when composing this mail.

What I have tried so far:
 * execute /usr/bin/rebase-trigger full, then re-run setup-x86_64.exe
   effect: tmux makes the terminal window hang when called.
   (I tried rebasing twice, both times led to the same result)

 * our IT department was in touch with the supplier of fideAS file enterpri=
se. I was told that the Cygwin stack memory is too small (only approx. 1.8M=
B), and that usual applications have around 10MB. I did not have any contex=
t information, so I did - basically without knowing what is going on behind=
 the scenes -:
--- cut ---
 1) create copy of cygwin directory to /cygdrive/d/cygwin64_copy in Windows=
 Explorer
 2) find /cygdrive/d/cygwin64_copy \( -iname '*.exe' -o '*.dll' \) -exec pe=
flags -X10485760 -x104857600 {} \;
 3) move original cygwin directory to /cygdrive/d/cygwin64_orig and /cygdri=
ve/d/cygwin64_copy to original directory
 4) try running tmux: no effect
--- cut ---
This did not have any evident effect. I was told that re-compiling Cygwin w=
ith a compiler option to increase the stack size (I assume this would be -W=
l,--stack,<size>) could solve the issue, but when the build process hung fo=
r several hours, I did not try this any further yet. Do you consider this a=
n option worth trying?

 * I set the environment variable CYGWIN to detect_bloda, but did not learn=
 anything from that (is this still active? https://cygwin.com/ml/cygwin-cvs=
/2016-q2/msg00135.html suggests it is not)

Note that the supplier has been working on this for more than a month now, =
but we neither have an ETA, nor feedback whether this can be fixed at all...
Does maybe someone here have an idea how to proceed any further?

Thank you very much in advance for your help!

Best regards,
Michael Weiner

------26A5DBFF11731B246AC797ACBBB90632
Content-Type: application/x-pkcs7-signature; name="smime.p7s"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="smime.p7s"
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------26A5DBFF11731B246AC797ACBBB90632--