fredemmott

Binary Handshake Protocol

This protocol provides authentication and initializes stream encryption for later protocols.

1. server confirms the client knows the password (don't allow random people to start broadcasting your webcam to the internet)
2. client confirms the server knows the password (probably not neccessary for this case, but why not)
3. establish a secure client-to-server stream
4. establish a secure server-to-client stream
5. be replay-resistent, both for servers and clients (don't allow someone who sniffed your wifi to start broadcasting your webcam to the internet)

fredemmott

$ cl.exe test.cpp && test.exe
10 4
$ g++ test.cpp -o test && ./test
10 10
$ cl.exe /vmg test.cpp && test.exe
10 10

fredemmott

fredemmott@fredemmott-fbmbp foo % echo -en "" | ./target/debug/foo
fredemmott@fredemmott-fbmbp foo % echo -en "\n" | ./target/debug/foo
Line: ''
fredemmott@fredemmott-fbmbp foo % echo -en "foo" | ./target/debug/foo
Line: 'foo'
fredemmott@fredemmott-fbmbp foo % echo -en "foo\n" | ./target/debug/foo
Line: 'foo'
fredemmott@fredemmott-fbmbp foo % echo -en "" | ./a.out
fredemmott@fredemmott-fbmbp foo % echo -en "\n" | ./a.out
Line: ''

fredemmott

diff --git a/_posts/2020-06-16-hhvm-4.62.markdown b/_posts/2020-06-16-hhvm-4.62.markdown
index 59c788d..4410fd4 100644
--- a/_posts/2020-06-16-hhvm-4.62.markdown
+++ b/_posts/2020-06-16-hhvm-4.62.markdown
@@ -25,6 +25,8 @@ and 4.56 LTS releases.
   initialized with keys, or if Map or ImmMap are initialized without keys.
   Previously, this would lead to a bytecode emitting error.
 - FIXME codes now need whitelisting in the project root .hhconfig
+- FIXME whitelisting does not support `<?hh // partial`; as such, you are likely
+  to need to migrate any remaining partial code to `.hackpartial` files.

fredemmott

[
  .errors[].message[]
  | select(.descr | startswith("You cannot use HH_FIXME"))
  | (
    if .path | endswith(".hackpartial")
    then  { it: ., option: "allowed_fixme_codes_partial" }
    else  { it: ., option: "allowed_fixme_codes_strict" }
    end
  )
  | (

fredemmott

[
  .errors[].message[]
  | select(.descr | startswith("You cannot use HH_FIXME"))
  | (
    if .path | endswith(".hackpartial")
    then  { it: ., option: "allowed_fixme_codes_partial" }
    else  { it: ., option: "allowed_fixme_codes_strict" }
    end
  )
  | (

fredemmott

[
  .errors[].message[]
  | select(.descr | startswith("You cannot use HH_FIXME"))
  | (
    if .path | endswith(".hackpartial")
    then  { it: ., option: "allowed_fixme_codes_partial" }
    else  { it: ., option: "allowed_fixme_codes_strict" }
    end
  )
  | (

fredemmott

fredemmott@fredemmott-fb /tmp % cat test.hack
<<__EntryPoint>>
function main(mixed $x): void {
  $x->:foo;
}
fredemmott@fredemmott-fb /tmp % hh_single_compile test.hack
# test.hack starts here

.filepath "test.hack";

fredemmott

...
[2020-06-09 13:23:43.303] Running in check mode
allowed_fixme_codes_partial=4323
allowed_fixme_codes_strict=4110

fredemmott

diff --git a/hphp/hack/hhi/hsl/ext_hsl_os_subprocesses.hhi b/hphp/hack/hhi/hsl/ext_hsl_os_subprocesses.hhi
index 59f4eb477b..9a0d09b546 100644
--- a/hphp/hack/hhi/hsl/ext_hsl_os_subprocesses.hhi
+++ b/hphp/hack/hhi/hsl/ext_hsl_os_subprocesses.hhi
@@ -15,6 +15,7 @@ use type HH\Lib\OS\FileDescriptor;
 type ForkAndExecveOptions = shape(
   ?'cwd' => string,
   ?'setsid' => bool,
+  ?'execvpe' => bool,
   ?'setpgid' => int,