F$GETJPI("","PROCESS_RIGHTS") %DCL-W-BUFOVF, command buffer overflow

[Ian Miller.]

I have submitted this as a issue at
http://www.hpuseradvocacy.org/

When it eventally appears then parhaps you could vote for it. Five votes will get it offically submitted to hp.

[Robert Gezelter]

Ian,

What subcategory did you enter it in?

- Bob Gezelter, http://www.rlgsc.com

[Ian Miller.]

www.hpuseradvocacy.org
Category OpenVMS/Management Tools and Administration/Security

but it won't appear until the moderators approve it.

[Thomas Ritter]

The new dcl.exe has been installed. It works.

I'm impressed. If you need edcl on vms 7.3-2 for f$getjpi( ,"process_rights") to work with big process rights identifier lists, then contact your support center.

Thanks for all for the interest and support.

Thomas.

[Jon Pinkley]

Thomas,

Did you ever upgrade to 8.3? I am seeing this behaviour on an Alpha 8.3 system patched current as of about 1 year ago (20-Nov-2009). Nothing in the recent patch release notes indicated this has been fixed since then.

I am guessing I will need to log a call, but it seems very odd that this fix wasn't included in patches to 8.3, (or possibly it was patches that broke it).

The system in question has VMS83A_UPDATE-V1000, released 9-JUN-2009, plus all other patches as of Nov 20, 2009. Update V1000 included the latest DCL patch, VMS83A_DCL-V0300, released 27-JUN-2008.

So it appears that Guy Peleg's patch never made it into the main stream.

So the question is, is anyone aware of a patch for 8.3, and if so a reference number to held support find it.

Thomas, did you record the call sequence number associated with the patch you got? If not, what does analyze image report?

Here's what the affected system's DCL.EXE from Alpha 8.3 + Update v1000 + patches has:

$ anal/imag/sel=(build,ident,link) sys$system:dcl.exe
SYS$COMMON:[SYSEXE]DCL.EXE;1
"XBCA-0080070008"
"X-52"
28-MAY-2008 15:44:20.62
$

The maximum length it will return is 1022 bytes.

$ pr=f$getjpi("","PROCESS_RIGHTS")
$ write sys$output f$len(pr)
1022
$ uaf rename/id jons_cms1 jons_cms12 ! add one character to the name of a held identifier
%UAF-I-RDBMDFYMSG, identifier JONS_CMS1 modified
$ pr=f$getjpi("","PROCESS_RIGHTS")
%DCL-W-BUFOVF, command buffer overflow - shorten expression or command line
$ uaf rename/id jons_cms12 jons_cms ! back to original name (before it was renamed to jons_cms1)
%UAF-I-RDBMDFYMSG, identifier JONS_CMS12 modified
$ pr=f$getjpi("","PROCESS_RIGHTS")
$ write sys$output f$len(pr)
1021
$

Jon