[EROS-Arch] Questioning need for Call Count

Joerg Bornschein joerg@zilium.de
Sat, 11 Nov 2000 04:24:17 +0100


On Fri, Nov 10, 2000 at 01:59:43PM -0500, Jonathan S. Shapiro wrote:

Sorry for writing yet another mail,

> Under the proposed design, there are two kinds of attacks that a malicious
> service might undertake against a caller.
> 
> 1. It might never return, blocking you forever.
> 2. It might return multiple times, messing up your other interactions.

Im not sure i get the in memory key representation and key invocation
right...
According to 

  http://www.eros-os.org/eros-src/sys/key/pk_ProcessKey.cxx#728

keyData is always 0. 
Could this be a place a serial number could be stored, unforgable by
the called service? Serial number checking could be performed in
the stubs.

Is it correct to assume keyData in 
  http://www.eros-os.org/eros-src/sys/key/pk_ProcessKey.cxx#728
is the same as key info in
  http://www.eros-os.org/eros-src/sys/arch/i486/capstubs/return.S#161 ?

later,

  joerg