Re: Vulnerability-based IPS Patent

[Drsolly <drsollyp () drsolly com>]

On Thu, 30 Mar 2006, der Mouse wrote:

> > [...]; file opened for writing, bytes written, file closed.  You
> > could argue that until the file is closed, the file isn't written to
> > disk (if you look at the directory entry of a file that's interrupted
> > at that point, you have a zero-byte file).
>
> Under what OS?

Dos - remember, we're talking about antivirus in the early 1990s.

> Certainly under a Unix variant, the only way I can see
> this happening is if (a) the file is small (under stdio's buffer size),
> (b) the program writing it uses stdio to do so, and (c) by "written"
> you mean "passed to stdio" rather than "flushed to the filesystem".

_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.