Counting code examples out of BONDI widlprocxml

2010-02-28T09:19:38Z

Using BONDI WIDLs and widlproc, how many code examples does each widl have?

hendry@x61 html$ sh code-count.sh
appconfig.widlprocxml 2
applauncher.widlprocxml 3
bondi.widlprocxml 2
calendar.widlprocxml 18
camera.widlprocxml 3
commlog.widlprocxml 0
contact.widlprocxml 19
devicestatus.widlprocxml 12
filesystem.widlprocxml 39
gallery.widlprocxml 19
geolocation.widlprocxml 19
messaging.widlprocxml 78
pim.widlprocxml 0
task.widlprocxml 14
telephony.widlprocxml 11
ui.widlprocxml 22

Now the script using xmlstarlet:

for i in *.widlprocxml
do
        CODE=$(xmlstarlet el $i | grep Code | sort | uniq)
        TOTAL=0
        for c in $CODE
        do
                NUM=$(xmlstarlet sel -t -v "count(//$c)" $i)
                TOTAL=$(expr $TOTAL + $NUM)
        done
        echo $i $TOTAL
done

The nasty CODE part is neccessary as code examples can be unfortunately included at different levels, for example:

Definitions/Module/Interface/Operation/descriptive/Code
Definitions/Module/Interface/descriptive/Code

Use xmlstarlet el telephony.widlprocxml to examine the XML structure.

Static linking improves security and updating

2010-02-23T17:37:34Z

Despite what GNU and opensource projects think, statically built apps are the way to go.

Security benefits of statically built binaries

Shared libraries are often touted as being good for security. No need to rebuild, you just replace the binary and everything linked to say an updated libpng.so gets the security fix.

Likewise one security problem in a shared library makes all the binaries dependent on it vulnerable.

The good security benefit of statically built libararies is that you elimate the library path. So you can't hack binaries like so:

LD_PRELOAD=/usr/lib/libpng12vulnerable.so /usr/bin/firefox

Or perhaps a binary with setuid right escalation.

Also since statically built binaries only compile in the object code they actually use from the library, the surface area of the attack is greatly reduced.

As we've seen in the last couple of months, updates to libjpeg and libpng can also involve ABI changes, meaning complete rebuilds in any case.

Please read the stali FAQ for more argumentation.

dabase

Counting code examples out of BONDI widlprocxml

Static linking improves security and updating

Security benefits of statically built binaries