Wine Traffic #22 For 20�Dec�1999

By Eric Pouech

Table Of Contents

Introduction

This is the twenty second release of the Wine's kernel cousin publication. It's main goal is to distribute widely what's going on around Wine (the Un*x windows emulator).

Because of Christmas holidays, there won't be any KC Wine next week.

Mailing List Stats For This Week

We looked at 109 posts in 386K.

There were 45 different contributors. 24 posted more than once. 23 posted last week too.

The top posters of the week were:

1. Buffers Handling

�Subject: "Buffers handling"

People: Andreas Mohr,�J�rgen Schmied,�,�Francois Gouget

Francois Gouget had a hard time trying to fix (from crashes and also code re-reading) some potential buffer overflows, missing trailing '\0' on strings and strncpy vs lstrncpyA (the later always add a trailing '\0', whereas the former doesn't if the destination buffer is too small). Francois provided several patches for review, which J�rgen Schmied and Andreas Mohr commented. Francois also sent a tool to help tracking those issues (which has been added to the unofficial patches list).

2. Crypto APIs and US laws

�Archive Link: "Crypto APIs and US laws"

People: Shaun Morris,�Alexandre Julliard,�,�Chet Murphy

Shaun Morris had some concerns with implementing Windows cryptographic APIs:
Would there be any problem with implementing the functions of the CryptoAPI (CryptAcquireContext, etc.) in advapi, from an NSA knocking down my door perspective? Obviously, Microsoft has done it, and the actual crypto goes in the provider, but I'm still a little concerned.

Chet Murphy provided a faq (from the Mozilla project) describing the details of cryptographic APIs and exportation rules from the US: http://www.mozilla.org/crypto-faq.html (http://www.mozilla.org/crypto-faq.html)

Alexandre Julliard gave his view on the subject:
I am not going to include in the standard distribution any patch that would cause Wine to fall under export restrictions. Besides I'm living in the US now so I wouldn't even be allowed to distribute the releases if I did include such a patch...

If there are really APIs that fall under export restrictions, they need to be developed and distributed from outside the US, as a patch to the main release. And you have to be very careful that nobody residing in the US takes any part in the development.

At the end of this thread, it was still not clear if the highest CryptoAPI was falling under the US export restriction (the lowest layer, of course, is).

Sharon And Joy

Kernel Traffic is grateful to be developed on a computer donated by Professor Greg Benson and Professor Allan Cruse in the Department of Computer Science at the University of San Francisco. This is the same department that invented FlashMob Computing. Kernel Traffic is hosted by the generous folks at kernel.org. All pages on this site are copyright their original authors, and distributed under the terms of the GNU General Public License version 2.0.