[ros-kernel] Re: page faults in msvcrt.dll

[Phillip S. <ps...@cf...>]

What do you mean about VMS?  The kernel simply takes dirty pages and places 
them on the free list to mark them as needing zeroed.  The idle thread 
comes by and zeroes pages on the free list, moving them to the zeroed list, 
so cpu time that otherwise is wasted it put to use zeroing pages, and it 
prevents a rather large security hole.  What if, for instance, your 
password is cached by the LSA, and someone wrote an app to churn lots of 
memory around and looking at the pages the VM gives it searching for your 
cached password.  Clearly this is something we wish to prevent.  Not to 
mention that many things, such as the .bss segments of executables assume 
that pages are zeroed first.

At 10:21 AM 10/28/2001 -0800, you wrote:
>At 10:48 AM 10/28/01 -0500, you wrote:
>>It most certainly does effect correctness;  it is a security hole.
>
>It effects correctness only if your requirement is to have C2 
>security.  This wont be the
>case for everyone using ReactOS however.  Personally I would rather see 
>speed over
>security in this case.  in VMS it is the allocators responsibility to mark 
>the pages as
>needing zeroing before reuse.  Too bad we cannot implement something like 
>that.
>
>
>Rex Jolliff
>re...@lv...

====================================================
= To remove yourself from this mailing list, go to =
= http://www.reactos.com/home/mailing.html         =
====================================================