Re: OPTIMIZE(*FULL)

Rory,
Be carefull with DBGVIEW(*SOURCE).
If you do not have the source on the machine you are trying to debug on, and in 
the exact same source file / library as it was compiled on, the STRDBG command 
will not work.
I would suggest that you use DBGVIEW(*LIST) as that will allow you to debug 
regardless of the source.
 
Jeff Young 
Sr. Programmer Analyst
Dynax Solutions, Inc.
A wholly owned subsidiary of enherent Corp.
IBM -e(logo) server Certified Systems Exper - iSeries Technical Solutions V5R2 
IBM  Certified Specialist- e(logo) server i5Series Technical Solutions Designer 
V5R3
IBM  Certified Specialist- e(logo)server i5Series Technical Solutions 
Implementer V5R3 


  
 





----- Original Message ----
From: Rory Hewitt <roryhewitt@xxxxxxxxx>
To: RPG programming on the AS400 / iSeries <rpg400-l@xxxxxxxxxxxx>
Sent: Monday, January 8, 2007 6:39:22 PM
Subject: Re: OPTIMIZE(*FULL)


Aaron,

I'm not sure whether this actually makes the code more secure. My company
used to run a process against all our shipped programs to do a CHGPGM
OTPIMIZE(*FULL) and DBGVIEW(*NONE) and/or RMVOBS(*YES). We stopped dpoing
that because it makes it more difficult to ensure that the customer has *
exactly* the same object as our developers.

Whilst removing observability obviously makes your code more secure, I don't
know if OPTIMIZE(*FULL) does. I'd suspect that a *really* determined
hacker/decompiler could figure it out either way. Frankly, if someone is *
that* keen to hack our software, good luck to 'em - the cost to decompile it
will probably cost more than a license anyway.

I just use DBGVIEW(*SOURCE) and be done with that - the program doesn't have
debug information shipped with it, but it can be easily debugged by us if
necessary.

Rory

p.s. The exception to all this is our licensing software, which is highly
secured.... :-)


On 1/8/07, albartell <albartell@xxxxxxxxx> wrote:

I was more doing it to gain more "secure" code based on another thread on
this forum a couple months ago.  I may have mis-interpreted someone's
response and should re-evaluate.

Thanks,
Aaron Bartell
http://mowyourlawn.com