Shawn Ostermann

OS X 11 problems

This got fixed in late 2016 and I forgot to close the ticket.

sign releases with GPG key

We had a lengthy discussion of this matter in our lab meeting this week. There several ways that this could be done: 1. sign the code with a PGP Key * the key would need to be fetched from a public PGP key repository 2. sign with an OpenSSL public/private key * the public key would need to be published somewhere that was independent administratively from Sourceforge 3. sign with an OpenSSH public/private key * the public key would need to be published somewhere that was independent administratively...

I'm with Scott on this one. Security code is hard and better left to experts, even when it seems like it should be simple. By relying on firewall rules instead, a gateway has all sorts of options: silently ignoring requests, refusing requests, logging requests, alerting administrators, etc, etc.

At Scott's suggestion, and in the interest of heading off future problems should Linux and friends wander down the same path, the shared context is now passed explicitely to the 3 child threads through the pthread_begin invocation.

Ipnd runs as a main process and 3 children threads. They attempt to share a data structure "ctx" between them by accessing a static pointer that is common to all 4 threads. Recent OSX security changes appear to remap shared memory when using shared libraries in such a way that the 3 child threads find that global static variable at a different address and then try to access the shared structure through a NULL pointer.

ipnd crashes on Mac