Re: Question on browseUnimplemented

"Tim M" <365nice@xxxxxxxxx> wrote in message news:b88433471ed18c8a056ed74a652@xxxxxxxxxxxxxxxxxxxxxxxx
... So thanks for the detailed reply - its been very educational. In summary, I will see some things in the system packages that are false positives as they are too expensive to truly fix, but on the whole I think I can use the info to automate something.


If you are scripting the deployment, you could also make use of the <UnimplementedMessages> section of the deployment XML log. The executable browser doesn't use this (it calculates the unimplemented messages within the "environment" against which it is configured, since it is capable of wider use than just browsing the content of executables), but it might be useful as part of a post deployment check. The messages it lists should be actual message sends, rather than just symbolic references that have no corresponding method.

Regards

OA

.

Relevant Pages

  • Re: Use iptables to block all non-US ssh traffic
    ... >> deployment. ... The same situation exists with the assignment of the ... By your own admition, ... proof that you have HAVE shown is that you get false positives (I assume ...
    (comp.os.linux.security)
  • Re: Snort with an expert system
    ... I submit that for the vast majority of consumers of IDS technology we ... events a day from their legacy IDS deployment and that had rendered ... still get false positives but if you've removed 99% of the noise first ... you'll have a useful detection capability anyway. ...
    (Focus-IDS)