JNI Signal Chaining and OWASP (Security)

Hank Edwards hedwards at crawfordtech.com
Mon Apr 15 18:03:33 UTC 2019


After considering this I decided on an attempting an alternate approach.  I coded the Java part of our API to perform a System.loadlibrary("jsig"); prior to the call for our JNI library to be loaded.  This gave the desired effect when testing; the native code handled the signals and the Java program completed successfully.

On Fri, Apr 12, 2019 at 08:24:06PM +0000, Hank Edwards wrote:
> Thanks for the suggestion, I was not aware the libjsig.so could be 
> loaded like that.  I'm assuming you mean a loadlibrary("jsig"); in the 
> .init.  It would also work I suppose to just add the .init to the 
> original shared library going forwards too, instead of putting a wrapper library in-between?

Yes, of course, if you're willing to modify/replace some such shared object, you can do that.

> I'll give that a try.


More information about the security-dev mailing list