Psst! Did you know DevelopmentNow is a mobile web site design agency?

Contact us for help mobilizing your site, or to sign up for our beta Mobile Web SDK!
all groups > iis security > october 2006 >

iis security : Web Applications located on a FileDiskImage not accessable with Internet Information Server ? (Delphi 2006 used to create web application)


David J. Craig
10/18/2006 9:21:26 PM
I would not expect any help with stolen code.

[quoted text, click to view]

David J. Craig
10/18/2006 11:04:59 PM
How many times to we have to inform the clueless that this is stolen code.
It is copyrighted by Jamey Kirby and StorageCraft. He just got an early
version for evaulation and stripped off their copyrights and put it under
the GPL. Doing that does not make it GPL, but stolen code. It is not worth
the time or money to sue when there is nothing that can be won. There have
been many posts by several people including Jamey and Maxim who have said it
is STOLEN code.

If I come to your home and steal your stuff. Then I take it to a pawnshop.
Can the pawnshop owner advertise it and sell it? I hope not. It is worse
if the pawnshop owner knew it was stolen or was the thief himself. Yes, we
all know where it is located. Most of us know where we can get copies of
almost any software package, music, and movies. Are they not 'stolen' and
had their copyright owner's rights violated?

[quoted text, click to view]

Skybuck Flying
10/19/2006 12:00:00 AM
Hello,

As a programmer I would like to keep all my source code together on a
FileDiskImage created with the FileDisk tool.

( http://www.winimage.com/misc/filedisk64.htm )

However when Internet Information Server tries to read/execute the web
application a Server Error happens, can this problem be fixed ?

*** Begin of Error ***

Server Error in '/SimpleWebApplicationTest' Application.
--------------------------------------------------------------------------------

Server cannot access application directory
'Z:\Delphi\Tests\SimpleWebApplicationTest\'. The directory does not exist or
is not accessible because of security settings.
Description: An unhandled exception occurred during the execution of the
current web request. Please review the stack trace for more information
about the error and where it originated in the code.

Exception Details: System.Web.HttpException: Server cannot access
application directory 'Z:\Delphi\Tests\SimpleWebApplicationTest\'. The
directory does not exist or is not accessible because of security settings.

Source Error:

An unhandled exception was generated during the execution of the current web
request. Information regarding the origin and location of the exception can
be identified using the exception stack trace below.

Stack Trace:


[HttpException (0x80004005): Server cannot access application directory
'Z:\Delphi\Tests\SimpleWebApplicationTest\'. The directory does not exist or
is not accessible because of security settings.]
System.Web.HttpRuntime.EnsureAccessToApplicationDirectory() +72
System.Web.HttpRuntime.FirstRequestInit(HttpContext context) +263

[HttpException (0x80004005): ASP.NET Initialization Error]
System.Web.HttpRuntime.FirstRequestInit(HttpContext context) +982
System.Web.HttpRuntime.ProcessRequestInternal(HttpWorkerRequest wr) +128




--------------------------------------------------------------------------------
Version Information: Microsoft .NET Framework Version:1.1.4322.2032; ASP.NET
Version:1.1.4322.2032

*** End of Error ***

Bye,
Skybuck.

Skybuck Flying
10/19/2006 12:00:00 AM
Here is a piece of code from the filedisk.sys driver:

case IRP_MJ_DEVICE_CONTROL:
switch (io_stack->Parameters.DeviceIoControl.IoControlCode)
{
case IOCTL_FILE_DISK_OPEN_FILE:

SeImpersonateClient(device_extension->security_client_context,
NULL); // *** looks suspicious ***

irp->IoStatus.Status = FileDiskOpenFile(device_object,
irp);

PsRevertToSelf();

break;

case IOCTL_FILE_DISK_CLOSE_FILE:
irp->IoStatus.Status = FileDiskCloseFile(device_object,
irp);
break;

default:
irp->IoStatus.Status = STATUS_DRIVER_INTERNAL_ERROR;
}
break;

default:
irp->IoStatus.Status = STATUS_DRIVER_INTERNAL_ERROR;
}

Maybe impersonating the thread is detected by windows/iis and causing
problems ?

Just a guess

Bye,
Skybuck.


[quoted text, click to view]

Skybuck Flying
10/19/2006 12:00:00 AM
Until microsoft straighten out there shit it's back to cassini I guess <-
which does work, doh hehehehe.

Bye,
Skybuck.

Rob Kennedy
10/19/2006 12:56:05 AM
[quoted text, click to view]

Is it really stolen if you can download it directly from the Web site of
the person who wrote it and it's distributed under the GNU GPL?

http://www.acc.umu.se/~bosse/

--
David Wang
10/19/2006 1:02:34 AM
The problem seems to be with the custom filesystem filter driver that
you are using to access that mounted image file. Not certain there is
anything for Microsoft to straighten out at all.


//David
http://w3-4u.blogspot.com
//


[quoted text, click to view]
Don Burn
10/19/2006 8:26:55 AM
You have already seen the story of FileDisk from previous posters. Bosse's
other code is just as suspect, years ago I posted a comment about the
Microsoft IFS kit, and recieved multiple requests from Bosse to provide him
with the code to add to his GNU ntifs.h. If you compare that file with
early ntddk.h versions you will find large blocks that are the same
including typos in the comments!

This guy is a thief, and if open source was professional then they would go
after him, the same way they go after people who rip off GPL code for
commercial products.


--
Don Burn (MVP, Windows DDK)
Windows 2k/XP/2k3 Filesystem and Driver Consulting
http://www.windrvr.com
Remove StopSpam from the email to reply



[quoted text, click to view]

Maxim S. Shatskih
10/19/2006 1:53:30 PM
[quoted text, click to view]

He did not wrote it. Jamey Kirby wrote it and handled to Bo Branten "for his
personal use".

Bo, in turn, distributed the code under GPL without Jamey's permission.

--
Maxim Shatskih, Windows DDK MVP
StorageCraft Corporation
maxim@storagecraft.com
http://www.storagecraft.com
Maxim S. Shatskih
10/19/2006 1:55:22 PM
[quoted text, click to view]

The parallel is a bit another - Joe gave some item to Bob for Bob's personal
use, and Bob sold it.

Not a criminal stealing, but a civil law delict for sure.

--
Maxim Shatskih, Windows DDK MVP
StorageCraft Corporation
maxim@storagecraft.com
http://www.storagecraft.com
Rob Kennedy
10/19/2006 11:50:33 PM
[quoted text, click to view]

Presumably just once. Then they're not clueless anymore. That doesn't
mean there aren't still _other_ clueless people you haven't informed
yet. You seem exasperated, and I'm sorry I contributed to that.

I'll remember this next time I'm tempted to reply to a cross-posted
message. Have a nice day.

--
Skybuck Flying
10/20/2006 12:00:00 AM
Ok,

Let's get back on topic.

Is this a file disk image driver bug ?

What could be the cause for windows xp 64 bit not being able to read the
file ???

Other applications like windows explorer etc work just fine with file disk
images.

It seems security/filediskimage related.

Bye,
Skybuck.

AddThis Social Bookmark Button