English
Forum

Thoughts @Exterrnal() and security

 

who in its application with sicherheitstechnisch sensiblen data hantiert, ought to very very over The Use the Profanfunktion @External cogitate.
 
10/08/06  
 



there External intern the same thing is How any DLL Aufrufe, want You us say, no DLLs To benefit?
 
10/08/06  
 



Nö.

It's all right me around the find out the anzuspringenden address during the Laufzeit the Quelltextes. the Einklinken over the Exporttable the jeweiligen DLL shining there particularly simply To his...

... because I must there nothing on the Festplatte change and can directly in memory aggieren...

...The Parameter the function abgreifen and again to function send...

...without in anybody point Idea of MSAM and Diassembling having To must...

...what naturally too for use of APIs from Headern out count would.
 
10/09/06  
 




RGH
XProfan knows three ways, circa functions in externenDLLs (and accordingly too The WindowsAPI) aufzurufen:

CALL: The appeal follows over The direct address., moreover must means in the XProfan-Program The DLL loaded and the FunktionsAdresse determined go. this lane is umständlich (= slow) and needed several Lines in the XProfan-Program. power really only sense, if one, about with COM-Interfaces, only The Adressen available has.

EXTERNAL: The bevorzugte lane, there too for Headerfiles suitable: an row in the program. The DLL must not each drop before loaded go. (hang from the function ex.) the loading the DLL and the detect the Funktionsadresse go in the Interpreter or. the Runtime (Delphi-Program) Done.

DEF: the historische lane: the what with External directly in the appeal standing, standing in the DEF-row: DLL-name and Funktionsname. in the Interpreter something slower as EXTERNAL, in the finished Program naturally not, there the Compiler The address the DEF-row enters and the DEF not any more sought go must.

EXTERNAL and DEF are technical largely identical and it go in the Interpreter/in the Runtime The equal routines called, around the Funktionsadresse To detect. The eigentliche Calling the external function with Übermittlung the Parameter is with all three mutants dieselbe routine in Interpreter and Runtime.

I faith hardly, that the appeal external functions from DLLs/APIs in XProfan more or less sicherheitsrelevant is, as in all whom others Programs The derartige Aufrufe imply ... and the are really any Windowsprogramme.

BTW: two Listviews Laufzeit the Quelltextes mean? at that finished Program runs no View source, separate the Compilat.

Greeting
Roland
 
Intel Duo E8400 3,0 GHz / 4 GB RAM / 1000 GB HDD - ATI Radeon HD 4770 512 MB - Windows 7 Home Premium 32Bit - XProfan X4
10/09/06  
 



If I with DEF The externe function at the beginning of my Program deklariere, when becomes then The dagehörige Sprungadresse determined? at that next Call the function in the program or with the Deklaration?

becomes these Sprungadresse sometime determined, during my Process runs, can I in the loaded Program The Exporttables the DLL change and so The aufgerufenen functions abgreifen. becomes The address at loading the Program at the beginning of my Quelltextes determined, does it not so simply.

the goes in none point against Profan, are thoughts to that program schlechthin...
 
10/09/06  
 




RGH
Nachtrag:

a Difference with DLL-Call there (though not one XProfan-Program):

DLLs can static and dynamic gelinkt go:

static: here go same startup The DLLs loaded and the Funktionsadressen red, so that with later Call, these already available stand. benefit: is something faster and whom most Programmiersprachen (z.B. Delphi) plainer to program. disadvantage: If the DLLs and/or functions No are, launch the program not and Windows reports, that a to that Perform the Program notwendige DLL missing.
there The OpenGL-DLLs on all of XProfan supported Systemen (ex windows 95/NT 3.51) present are, these in XProfan static gelinkt.

dynamic: here go The DLLs first loaded and the Funktionsadressen determined, as they in the program called go. benefit: If defined Funktionalitäten of users not needed go, need it neither The DLLs on seinem computer having. an Error Message comes first, if The suitable Funktionalität called becomes. disadvantage: its one integrally small little slower and z.B. in Delphi something aufwändiger To implementieren.
The ODBC-DLLs for SQL-interface have I in XProfan dynamic gelinkt. XProfan launch means on Systemen without installed ODBC-driver (z.B. Win95/98 without MS-Office) completely free from problems, created but a Error Message, if one on such Systemen one SQLInit attempts.

in the XProfan-Program go for all with DEF, EXTERNAL or CALL begot DLL-Call The notwendigen DLLs dynamic gelinkt. (the would at Interpreter too none differently possible, there this Yes not know can, take off Schweinereien the geschätzte Programmer everything with it program wants.)

Greeting
Roland
 
Intel Duo E8400 3,0 GHz / 4 GB RAM / 1000 GB HDD - ATI Radeon HD 4770 512 MB - Windows 7 Home Premium 32Bit - XProfan X4
10/09/06  
 




RGH
[quote:b7f9a07702=Andreas Hötker]If I with DEF The externe function at the beginning of my Program deklariere, when becomes then The dagehörige Sprungadresse determined? at that next Call the function in the program or with the Deklaration?[/quote:b7f9a07702]
first when calling the function in the program. From therefore there none Difference between DEF and EXTERNAL.

Greeting
Roland
 
Intel Duo E8400 3,0 GHz / 4 GB RAM / 1000 GB HDD - ATI Radeon HD 4770 512 MB - Windows 7 Home Premium 32Bit - XProfan X4
10/09/06  
 



[quote:b7ae512a2a=RGH]
CALL: The appeal follows over The direct address., moreover must means in the XProfan-Program The DLL loaded and the FunktionsAdresse determined go. this lane is umständlich (= slow) and needed several Lines in the XProfan-Program. power really only sense, if one, about with COM-Interfaces, only The Adressen available has.[/quote:b7ae512a2a]
at that appeal with Funktionsnamen must intern too first The Funktionsadresse determined go, so the it with Call IMHO not longer last can, separate just as quick his ought to and ex the 2ten Funktionsaufruf a Geschwindigkeitszuwachs means.

there it in the doing umständlicher is, rewards The usage but mostly not
 
10/09/06  
 




RGH
[quote:8841b3a260=TS-Soft]at that appeal with Funktionsnamen must intern too first The Funktionsadresse determined go, so the it with Call IMHO not longer last can, separate just as quick his ought to and ex the 2ten Funktionsaufruf a Geschwindigkeitszuwachs means.[/quote:8841b3a260]
there XProfan too compiliert unfortunately still not so quick How TurboDelphi is ;) , is it already one small benefit, if Delphi The DLL loading and the Funktionsadresse determined and not XProfan.
with mehrfachem appeal same function can the naturally kompensiert and be then a small tempo-benefit mean.

Greeting
Roland
 
Intel Duo E8400 3,0 GHz / 4 GB RAM / 1000 GB HDD - ATI Radeon HD 4770 512 MB - Windows 7 Home Premium 32Bit - XProfan X4
10/09/06  
 



Vorneweg: first time many Thanks.

I habs with TNT strain time self ausprobiert and the API MessageBeep from the User32 on The function MessageBoxA detoured. with DEF and External becomes then wirklick MessageBoxA instead of MessageBeep carryed out. The sicherere method would then really The over Call and GetProcAddress (where GetProcAddress with Program Start called go should).

what me gefreut has,: The Profanfunktion Beep begot moreover one Beep, instead of of/ one Messagebox - i think time, this is but not all functions so - or??
 
10/09/06  
 



Juhu then mach ichs with XPSE Yes correctly. that I from Headerfiles genutzte Apis in Calls umwandle...
 
10/09/06  
 



Yes, therefore my question here.
 
10/09/06  
 




Answer


Topictitle, max. 100 characters.
 

Systemprofile:

no Systemprofil laid out. [anlegen]

XProfan:

 Posting  Font  Smilies  ▼ 

Please register circa a Posting To verfassen.
 

Topic-Options

1.762 Views

Untitledvor 0 min.
Sven Bader09/03/21
p.specht04/29/19
Christof Neuß10/14/16
iF12/29/12

Themeninformationen

this Topic has 3 subscriber:

unbekannt (9x)
RGH (5x)
iF (2x)


Admins  |  AGB  |  Applications  |  Authors  |  Chat  |  Privacy Policy  |  Download  |  Entrance  |  Help  |  Merchantportal  |  Imprint  |  Mart  |  Interfaces  |  SDK  |  Services  |  Games  |  Search  |  Support

One proposition all XProfan, The there's!


My XProfan
Private Messages
Own Storage Forum
Topics-Remember-List
Own Posts
Own Topics
Clipboard
Log off
 Deutsch English Français Español Italia
Translations

Privacy Policy


we use Cookies only as Session-Cookies because of the technical necessity and with us there no Cookies of Drittanbietern.

If you here on our Website click or navigate, stimmst You ours registration of Information in our Cookies on XProfan.Net To.

further Information To our Cookies and moreover, How You The control above keep, find You in ours nachfolgenden Datenschutzerklärung.


all rightDatenschutzerklärung
i want none Cookie