short [Sat, 12 Jul 2003 18:21:04 +0000 (18:21 +0000)]
CcMapData(): +sanity boundary check of mapped memory by unmapped neighbours
short [Fri, 11 Jul 2003 08:24:58 +0000 (08:24 +0000)]
Fixed fix of collapsing '.' and '..' pathname elements.
short [Fri, 11 Jul 2003 07:37:40 +0000 (07:37 +0000)]
Fixed captive_cc_flush() to flush even buffers written by other buffer writes.
short [Fri, 11 Jul 2003 06:55:43 +0000 (06:55 +0000)]
Call also MmBuildMdlForNonPagedPool() after each MmCreateMdl().
- no effect seen on ntfs.sys of NT-5.1sp1
CcPurgeCacheSection(): Return TRUE on empty purge.
- required by LOCK_VOLUME on ntfs.sys of NT-5.1sp1
+CcWaitForCurrentLazyWriterActivity()
short [Fri, 11 Jul 2003 06:53:43 +0000 (06:53 +0000)]
dismount_volume(): Also FSCTL_LOCK_VOLUME before FSCTL_DISMOUNT_VOLUME
- no effect seen on ntfs.sys of NT-5.1sp1
short [Fri, 11 Jul 2003 06:51:58 +0000 (06:51 +0000)]
+CcWaitForCurrentLazyWriterActivity()
short [Sat, 5 Jul 2003 19:53:26 +0000 (19:53 +0000)]
_abnormal_termination() is now "wrap"ed by %fs:[0] protection agains '-1'
- there is no toplevel exception handler registered by libcaptive
short [Sat, 5 Jul 2003 19:50:02 +0000 (19:50 +0000)]
CcUnpinRepinnedBcb(): Flush 'Bcb' if 'WriteThrough' parameter specified
- fixes DISMOUNT_VOLUME of fastfat.sys
short [Sat, 5 Jul 2003 15:19:28 +0000 (15:19 +0000)]
+strict ulimit (rlimit) of sandbox child
short [Sat, 5 Jul 2003 08:35:38 +0000 (08:35 +0000)]
Do not use total amount limited IPC shm memory for single-mapped Cc pages.
- needed to write files >16MB on GNU/Linux
short [Sat, 5 Jul 2003 08:35:19 +0000 (08:35 +0000)]
Refuse to overwrite target host-OS file by "get" command.
short [Sat, 5 Jul 2003 08:22:26 +0000 (08:22 +0000)]
+minor sanity checks
short [Sat, 5 Jul 2003 08:21:23 +0000 (08:21 +0000)]
Fixed EOF reading broken by recent --bug-pathname implementation.
short [Fri, 4 Jul 2003 18:23:05 +0000 (18:23 +0000)]
Report specific error message on failed shmget(2) on IPC shared mem exceed
short [Fri, 4 Jul 2003 15:59:17 +0000 (15:59 +0000)]
Fixed access to filenames with trailing dot(s) ('.')
short [Fri, 4 Jul 2003 15:42:04 +0000 (15:42 +0000)]
captive_sandbox_parent_query_vfs_retry(): Fixed assumed success if CORBA failure
short [Fri, 4 Jul 2003 15:06:35 +0000 (15:06 +0000)]
+Generates --bug-pathname resources file for sandbox crash bugreport
short [Fri, 4 Jul 2003 05:36:30 +0000 (05:36 +0000)]
RtlpExecuteHandlerForException(): Permit nesting for FSCTL_DISMOUNT_VOLUME.
short [Fri, 4 Jul 2003 05:10:18 +0000 (05:10 +0000)]
+Implemented filesystem unmount to successfuly remount ntfs volume
short [Fri, 4 Jul 2003 05:05:49 +0000 (05:05 +0000)]
captive_shutdown(): Implemented proper unmount for ntfs.sys of NT-5.1sp1.
+dismount_volume(): Invoke filesystem FSCTL_DISMOUNT_VOLUME.
short [Fri, 4 Jul 2003 04:57:57 +0000 (04:57 +0000)]
_abnormal_termination(): Disabled here as it is now "pass"ed to ntoskrnl.
short [Fri, 4 Jul 2003 04:55:01 +0000 (04:55 +0000)]
Simplified captive_sandbox_spawn() prototype.
Implemented 3-stage image_iochannel GIOChannel sequence for commits.
+captive_sandbox_parent_vfs_commit()
short [Fri, 4 Jul 2003 04:53:27 +0000 (04:53 +0000)]
Disabled sandbox child shutdown process exit as it is killed by its parent
- otherwise COMM_FAILURE occured on shutdown() method call by parent
short [Fri, 4 Jul 2003 04:51:56 +0000 (04:51 +0000)]
Simplified captive_sandbox_spawn() prototype.
Implemented 3-stage image_iochannel GIOChannel sequence for commits.
validate_CORBA_Environment(): CORBA Exception reporting is fatal
- all its callers considered such case fatal anyway
corba_shutdown(): CORBA_ORB_destroy() errors ignored
- it sometimes reports: a total of X refs to X ORB objects were leaked
- FIXME - 1 ref per each sandbox child failure-restart cycle; why?
Disabled sandbox child shutdown process exit as it is killed by its parent
- otherwise COMM_FAILURE occured on shutdown() method call by parent
Fixed heartbeat disable by sandbox_child_prepare_shutdown()
captive_sandbox_parent_query_vfs_retry(): Fixed exception memory leak
short [Fri, 4 Jul 2003 04:46:04 +0000 (04:46 +0000)]
Implemented 3-stage image_iochannel GIOChannel sequence for commits.
short [Fri, 4 Jul 2003 04:43:48 +0000 (04:43 +0000)]
Simplified captive_sandbox_spawn() prototype.
short [Fri, 4 Jul 2003 04:26:15 +0000 (04:26 +0000)]
+fatal reporting message: "Invalid media IOCTL 0x%08lX"
+handler of IRP_MJ_FLUSH_BUFFERS
short [Fri, 4 Jul 2003 04:24:30 +0000 (04:24 +0000)]
+ntoskrnl/fs/util.c
short [Fri, 4 Jul 2003 04:23:25 +0000 (04:23 +0000)]
+libcaptive/ps/thread.c
- +KeSetPriorityThread()
short [Fri, 4 Jul 2003 04:22:48 +0000 (04:22 +0000)]
+libcaptive/ps/thread.c
short [Fri, 4 Jul 2003 04:21:57 +0000 (04:21 +0000)]
+FsRtlIsTotalDeviceFailure()
+_abnormal_termination() as "pass"ed now
+KeSetPriorityThread()
+IoPageRead()
short [Fri, 4 Jul 2003 04:20:51 +0000 (04:20 +0000)]
+_abnormal_termination() cdecl args fixup
short [Fri, 4 Jul 2003 04:20:11 +0000 (04:20 +0000)]
+ExRaiseStatus()
- needed by ntfs.sys of NT-5.1sp1 FSCTL_DISMOUNT_VOLUME for STATUS_CANT_WAIT
- libcaptive one disabled as we use real ReactOS ExRaiseStatus() implementation
short [Fri, 4 Jul 2003 04:18:33 +0000 (04:18 +0000)]
Fixed handling of cdecl fixups with 0 arguments.
short [Fri, 4 Jul 2003 04:17:41 +0000 (04:17 +0000)]
+captive_sandbox_parent_vfs_commit()
short [Fri, 4 Jul 2003 04:17:07 +0000 (04:17 +0000)]
+captive_vfs_commit()
short [Fri, 4 Jul 2003 04:16:09 +0000 (04:16 +0000)]
+captive_giochannel_blind_commit()
short [Fri, 4 Jul 2003 04:14:51 +0000 (04:14 +0000)]
Compiler warnings fixed for glib-2.2.2 compatibility.
short [Fri, 4 Jul 2003 04:13:20 +0000 (04:13 +0000)]
+command "commit": Write any pending changes and remount the volume.
short [Fri, 4 Jul 2003 04:12:50 +0000 (04:12 +0000)]
+command "commit": Write any pending changes and remount the volume.
+disable stdout and stderr output buffering
short [Wed, 18 Jun 2003 09:32:14 +0000 (09:32 +0000)]
giochannel-blind moved from the sandboxed child to its parent.
- needed for bugreporting.
Fixed running of sandbox child without chroot environment.
Fixed --sandbox-server-ior handling.
short [Wed, 18 Jun 2003 09:30:48 +0000 (09:30 +0000)]
giochannel-blind moved from the sandboxed child to its parent.
- needed for bugreporting.
short [Wed, 18 Jun 2003 09:29:46 +0000 (09:29 +0000)]
Cosmetic: Comment updated.
short [Wed, 18 Jun 2003 09:28:43 +0000 (09:28 +0000)]
captive_vfs_new(): Discard "Captive" debug messages if not wised.
- Here is the first initializaton point of parent in sandboxed mode.
short [Wed, 18 Jun 2003 09:27:52 +0000 (09:27 +0000)]
GLib messages are always fatal sandbox child as we have the right to fail.
short [Wed, 18 Jun 2003 09:27:04 +0000 (09:27 +0000)]
Implemented 'struct blind_block' for read blocks tracking for bugreporting.
short [Wed, 18 Jun 2003 09:26:08 +0000 (09:26 +0000)]
Return the created object as NULL if constructor failed.
short [Wed, 18 Jun 2003 09:24:58 +0000 (09:24 +0000)]
Debug captive-sandbox-server in unsandboxed environment (no suid, no chroot).
short [Tue, 17 Jun 2003 08:19:28 +0000 (08:19 +0000)]
+cleanup of dead sandbox children
short [Tue, 17 Jun 2003 07:49:20 +0000 (07:49 +0000)]
Fixed memory allocation of 'sandbox_parent_own_orbit_dir'.
short [Tue, 17 Jun 2003 07:41:31 +0000 (07:41 +0000)]
captive_options_copy(): Fixed 'sandbox_server_argv' copying.
short [Mon, 16 Jun 2003 11:37:51 +0000 (11:37 +0000)]
Use generic AC_SYS_LARGEFILE instead of custom _FILE_OFFSET_BITS hack
short [Mon, 16 Jun 2003 11:37:19 +0000 (11:37 +0000)]
+captive-sandbox-server chroot/setuid security isolation
short [Mon, 16 Jun 2003 11:36:53 +0000 (11:36 +0000)]
+captive-sandbox-server chroot/setuid security isolation
Fixed --sandbox-server & --sandbox-server-ior to be captive_options specific.
short [Mon, 16 Jun 2003 11:36:13 +0000 (11:36 +0000)]
Fixed --sandbox-server & --sandbox-server-ior to be captive_options specific.
short [Mon, 16 Jun 2003 11:34:31 +0000 (11:34 +0000)]
Update for automake-1.7.5-1 (use AM_CFLAGS)
short [Mon, 16 Jun 2003 11:30:33 +0000 (11:30 +0000)]
Use generic AC_SYS_LARGEFILE instead of custom _FILE_OFFSET_BITS hack
+captive-sandbox-server chroot/setuid security isolation
short [Sat, 7 Jun 2003 18:12:04 +0000 (18:12 +0000)]
+forgotten init.h
short [Sat, 7 Jun 2003 18:10:41 +0000 (18:10 +0000)]
captive-sandbox-server installed now as SUID
short [Sat, 7 Jun 2003 18:09:55 +0000 (18:09 +0000)]
Fixed missing 'GETTEXT_PACKAGE' definition needed by glib-gettextize(1)
short [Sat, 7 Jun 2003 18:09:02 +0000 (18:09 +0000)]
EXTRA_DIST-=ABOUT-NLS,config.rpath
- not provided by glib-gettextize(1) as it was by gettextize(1)
short [Sat, 7 Jun 2003 15:27:53 +0000 (15:27 +0000)]
Fixed ops on NULL 'captive_options->image_iochannel'.
short [Sat, 7 Jun 2003 15:26:55 +0000 (15:26 +0000)]
Fixed compatibility with >4GB devices
short [Sat, 7 Jun 2003 15:25:53 +0000 (15:25 +0000)]
Multifilesystem capability implemented
short [Sat, 7 Jun 2003 10:12:10 +0000 (10:12 +0000)]
Implemented backward GIOChannel CORBA interface
short [Sat, 7 Jun 2003 07:25:38 +0000 (07:25 +0000)]
+gdb init script for convenient captive-sandbox-server debugging
short [Sat, 7 Jun 2003 07:22:11 +0000 (07:22 +0000)]
+captive-sandbox-server for isolated filesystem sendbox server
short [Sat, 7 Jun 2003 07:20:01 +0000 (07:20 +0000)]
+backward image iochannel over CORBA transport to be sandboxable
short [Sat, 7 Jun 2003 07:19:33 +0000 (07:19 +0000)]
+captive-sandbox-server for isolated filesystem sendbox server
captive_options module-loading generalized to be CORBA transportable
Renamed "GlibLogFunc" to "GLogFunc"
short [Sat, 7 Jun 2003 07:19:00 +0000 (07:19 +0000)]
Remove registerGlibLogFunc() of Vfs as it is superseded by init()
+init() method for passing captive_options over CORBA channel
Fixed Vfs cleanup
short [Sat, 7 Jun 2003 07:18:28 +0000 (07:18 +0000)]
Renamed "GlibLogFunc" to "GLogFunc"
short [Sat, 7 Jun 2003 07:18:00 +0000 (07:18 +0000)]
+object shutdown() functions as release() will not destroy() servants
short [Sat, 7 Jun 2003 07:17:03 +0000 (07:17 +0000)]
Renamed "GlibLogFunc" to "GLogFunc"
+backward image iochannel over CORBA transport to be sandboxable
+object shutdown() functions as release() will not destroy() servants
short [Sat, 7 Jun 2003 07:16:34 +0000 (07:16 +0000)]
Renamed "GlibLogFunc" to "GLogFunc"
+backward image iochannel over CORBA transport to be sandboxable
Fixed child servants cleanup
short [Sat, 7 Jun 2003 07:15:37 +0000 (07:15 +0000)]
+child restarting on its failure
+object shutdown() functions as release() will not destroy() servants
short [Sat, 7 Jun 2003 07:14:41 +0000 (07:14 +0000)]
Renamed "GlibLogFunc" to "GLogFunc"
+backward image iochannel over CORBA transport to be sandboxable
short [Sat, 7 Jun 2003 07:14:12 +0000 (07:14 +0000)]
+Options "--sandbox-server" and "--sandbox-server-ior"
short [Sat, 7 Jun 2003 07:13:43 +0000 (07:13 +0000)]
captive_options module-loading generalized to be CORBA transportable
+Options "--sandbox-server" and "--sandbox-server-ior"
short [Sat, 7 Jun 2003 07:13:17 +0000 (07:13 +0000)]
captive_options module-loading generalized to be CORBA transportable
sandboxing is now off by default
+Options "--sandbox-server" and "--sandbox-server-ior"
short [Sat, 7 Jun 2003 07:12:30 +0000 (07:12 +0000)]
captive_options module-loading generalized to be CORBA transportable
short [Sat, 7 Jun 2003 06:41:21 +0000 (06:41 +0000)]
Cosmetic: +comment about g_log_set_always_fatal() use by sandbox parent
short [Sat, 7 Jun 2003 06:39:44 +0000 (06:39 +0000)]
+captive-sandbox-server for isolated filesystem sendbox server
short [Sun, 4 May 2003 12:03:33 +0000 (12:03 +0000)]
Finished and deployed CORBA sandbox separation
short [Fri, 2 May 2003 18:30:44 +0000 (18:30 +0000)]
First phase of multifilesystem enhancement
- CORBA not yet finished but GObject Vfs already implemented
short [Fri, 2 May 2003 08:13:14 +0000 (08:13 +0000)]
readline-required libraries put to the specific READLINE_LIBS (not LIBS)
short [Fri, 2 May 2003 07:40:26 +0000 (07:40 +0000)]
Replaced GNU gettext by the simplified GLib gettext
- http://lists.gnome.org/archives/gtk-devel-list/2003-April/msg00066.html
short [Thu, 1 May 2003 23:58:11 +0000 (23:58 +0000)]
+missing "captive-ntfs"* GnomeVFS schemes
short [Thu, 1 May 2003 23:11:31 +0000 (23:11 +0000)]
VERSION=0.9cvs
short [Thu, 1 May 2003 23:08:58 +0000 (23:08 +0000)]
VERSION=0.8
short [Thu, 1 May 2003 21:25:50 +0000 (21:25 +0000)]
+comply with LSN linear sequencing requirements
- FIXME: out of order CcFlushCache() will cause assertion fail; does it occur?
+proper Cache Manager flushing during captive shutdown / unmount
short [Thu, 1 May 2003 21:23:24 +0000 (21:23 +0000)]
+proper Cache Manager flushing during captive shutdown / unmount
short [Thu, 1 May 2003 16:47:00 +0000 (16:47 +0000)]
Fixed sanity check to not to crash in multithreaded environment (GnomeVFS)
short [Thu, 1 May 2003 13:20:30 +0000 (13:20 +0000)]
Update for captive-0.8
short [Thu, 1 May 2003 13:19:56 +0000 (13:19 +0000)]
Fixed locale support
short [Thu, 1 May 2003 12:39:37 +0000 (12:39 +0000)]
Cosmetic: Typo
short [Thu, 1 May 2003 09:17:03 +0000 (09:17 +0000)]
+captive_leave() to replace g_idle*() function calls postponing
- g_idle*() can get executed during KeWaitForSingleObject()
+captive_usecount() to track no-files-open state of libcaptive
- unused now; to be utilized for safe fs unmount-commit-remount points
short [Thu, 1 May 2003 09:15:09 +0000 (09:15 +0000)]
+captive_usecount() to track no-files-open state of libcaptive
- unused now; to be utilized for safe fs unmount-commit-remount points
short [Thu, 1 May 2003 09:13:34 +0000 (09:13 +0000)]
+captive_leave() to replace g_idle*() function calls postponing
- g_idle*() can get executed during KeWaitForSingleObject()
short [Thu, 1 May 2003 09:12:15 +0000 (09:12 +0000)]
Track and sanity check Cc{Init,Uninit}ializeCacheMap() calls
CcUnpinData() now uses captive_leave() instead of g_idle*() calls
- g_idle*() can get executed during KeWaitForSingleObject()
captive_privbcb_flush: +call AcquireForLazyWrite(),ReleaseFromLazyWrite()
short [Thu, 1 May 2003 09:04:18 +0000 (09:04 +0000)]
RtlAssert(): Printed message is now a fatal g_error() instead of g_message()