RE: Buffer overflow and code execution on iSeries

Bob,

Don in DC

On Wed, 20 Jul 2005, Bob Cozzi wrote:

For years I sold a product named SUSPENSE that hooked the SEPT so that when
the SysReq key was pressed, the end-user could either enter a command or
select the regular SysReq Menu options. It was very widely received and
utilized. I had no problems, but of course on each OS update, the customers
had to reinstall the tool.

-Bob Cozzi
www.RPGxTools.com
If everything is under control, you are going too slow.
- Mario Andretti

-----Original Message-----
From: mi400-bounces@xxxxxxxxxxxx [mailto:mi400-bounces@xxxxxxxxxxxx] On
Behalf Of jm penasse
Sent: Wednesday, July 20, 2005 4:10 AM
To: MI Programming on the AS400 / iSeries
Subject: RE: [MI400] Buffer overflow and code execution on iSeries

Steve,

All theory of course. The SEPT hook is something I always wanted
to try but
did not have the nerve for.  What is the worse that could happen?
 A system
crash??

-Steve

Each job has a pointer to the Sept in its PCO.
So, you can create your own space, copy the original Sept into your space,
in the PCO change the sept pointer to a pointer to your space. Voilà !
You can change pointers in your space as you like, only your job will crash.
Nevertheless I advise to restore original SEPT Pointer into PCO before
ending your job. Entries in WCBT are reused, and new jobs may be started
with your own "sept".

Jean Michel

_______________________________________________
This is the MI Programming on the AS400 / iSeries (MI400) mailing list
To post a message email: MI400@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/mi400
or email: MI400-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/mi400.





_______________________________________________
This is the MI Programming on the AS400 / iSeries (MI400) mailing list
To post a message email: MI400@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/mi400
or email: MI400-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/mi400.