Buffer overflow attack in Solaris 10/SPARC

Hi all， I am doing a hardware security research and using a shellcode of sparc CPU as shown below:
  "\x20\xbf\xff\xff" /* bn,a */
"\x20\xbf\xff\xff" /* bn,a */
"\x7f\xff\xff\xff" /* call */
"\x90\x03\xe0\x20" /* add %o7,32,%o0 */
"\x92\x02\x20\x10" /* add %o0,16,%o1 */
"\xc0\x22\x20\x08" /* st %g0,[%o0+8] */
"\xd0\x22\x20\x10" /* st %o0,[%o0+16] */
"\xc0\x22\x20\x14" /* st %g0,[%o0+20] */
"\x82\x10\x20\x0b" /* mov 0x0b,%g1 */
"\x91\xd0\x20\x08" /* ta 8 */
"/bin/ksh" ;
I know when doing the system call, we need :
1: Arguments in output registers
2: System call number in %g1
3: Trap 8
My questions are, what's the purpose of the BN(branch never) and CALL instruction in the beginning?
Why does it put /bin/ksh in the last line, which part of/how does the program utilize this path? Thank you !

You have a question about a specific piece of application software.
Go ask at the official website for it.
http://meld.sourceforge.net/
Click on the "Install" link at the top of their web page.
(That link was the first hit for a Google search on `meld software`.)

Similar Messages

  • Ring buffer overflow message (Solaris 10)

    When I disconnected the Ethernet cable from the back of our Netra 210 , the console would show this messages
    # telnet <ip>
    Trying <ip>...P su: [ID 643653 kern.notice] NOTICE: su0: ring buffer overflow Apr 3 11:57:11
    kern.notice] NOTICE: su0: ring buffer overflow
    su: [ID 643653 kern.notice] NOTICE: su0: ring buffer overflow
    Escape character is '^]
    login: root7:11 su: [ID 643653 kern.notice] NOTICE: su0: ring buffer ove
    rflow
    Password: 57:11
    Last login: Wed Apr 2 14:05:27 from 10.29.1.10ice] NOTICE: su0: ring buffer overflow
    Could anyone tell why these messages are keep on coming on ??
    -Amit

    'su' is one of the serial drivers. I'd expect that message if the serial port is attached to something that is screaming data at the machine. One of the buffers that is examining the data is overflowing.
    Is something attached to one of the serial ports?
    Darren

  • Log buffer overflow

    I have been receiving the flex log buffer overflow error for a long time. I don't believe it is causing any problem but I'm not sure.
    I have Iplanet Web Server 4.1 on Solaris 2.6.
    I have changed the LogFlushInterval from the default 30 seconds to 5 seconds.
    I am logging a great deal of information
    My questions are...
    should I be concerned ?
    when I get that error is the buffer being immediately dumped to the log file ?
    am I losing any log information ?
    can I increase the buffer size ?
    should I reduce the LogFlushInterval any more ?
    Thanks

    The error message indicates that an access log entry exceeded the maximum of 4096 bytes and was truncated. You should check the access log file for suspicious entries.
    Adjusting LogFlushInterval won't affect this problem, and unfortunately there's no way to increase flex log buffer size.

  • Xvfb on Solaris 8 (SPARC 32 bit)

    Hello,
    We need to run an Oracle server that needs a Virtual Frame Buffer. We need to set DISPLAY variable set on the system. Opening an xhost is not a solution for us because it is not in the security policy.
    Any pointers or docs are appreciated.
    Thanks in advance,
    Arun.

    Kumar Jangid wrote:
    An .iso image can be downloaded from Oracle's website. You can then create a VM and can install Solaris 10 using it's .iso image.
    Download from: http://www.oracle.com/technetwork/server-storage/solaris10/downloads/index.html
    Hope this will help.
    Edited by: Kumar Jangid on Jul 26, 2012 12:30 AM@ Kumar Jangid,
    Did you actually read the original post?
    That person is confused on what they want or need or think is possible.
    Wait until they respond with a more complete description before throwing out a response that can only confuse them more.
    They said:
    Can someone please let me know the download link from where i can download Solaris 10 Sparc - 32 bit ?which does not exist and has NEVER existed as a free download.
    Then they said:
    As I have to install this using VMware 7 workstation on 32 bit windows 7A Solaris release for SPARC will never run on a Windows box.

  • How to check udp buffer overflow in solaris10

    Hello All,
    We have developped a C++ application which uses connection based udp socket for transfering the data between two solaris10 machines. The data transfer takesplace for every 20 min and continues for about 1 min. The total no of udp sockets i am using is more than 1200. During the time of socket creation i don't set the send and receive buffer size, so the default parameter configured in the system will be considered.
    In certain cases the receiving end application does not receive any data, but the sender continues sending the data, this i could see from the snoop. Also the write operation doesn't fail in the sender side.
    From the snoop command i could see the time interval between the packets sent is 30microseconds. So there could be possibility that udp buffer may overflow.
    Does anybody know the solaris system command to find the udp buffer overflow?.

    You are more likely to get helpful answers about Solaris questions in a Solaris forum. Try these:
    http://forum.java.sun.com/index.jspa?tab=solaris
    http://www.opensolaris.org/os/discussions/
    http://www.opensolaris.org/os/communities/#portal

  • Flex Log Buffer Overflow Error

    Hello,
    We are running SunOne Server 6 SP4 on Solaris 2.8.
    We have a site that has numerous URL Forwards that all work. We added another one today and when you try and go to that one we get the following error in the error log:
    flex log buffer overflow- greater than 4096 characters
    Any help on what this means and how to fix it?
    thanks!!

    We found the problem.
    We had a recursive URL call.
    example: what not to do when setting up URL forwards.
    URL Forward /emp directory to /emp/some_file

  • Exploit buffer overflow

    Dear All,
    I got the below in my var/adm/messages:
    Dec 4 15:55:12 scotty ns-proxy[2441]: [ID 461630 user.crit] gethostans: possible attempt to exploit buffer overflow while looking up t5.tagstat.com
    Dec 4 15:55:12 scotty ns-proxy[3364]: [ID 461630 user.crit] gethostans: possible attempt to exploit buffer overflow while looking up t5.tagstat.com
    Dec 4 15:55:12 scotty ns-proxy[2359]: [ID 461630 user.crit] gethostans: possible attempt to exploit buffer overflow while looking up t5.tagstat.com
    Dec 4 15:55:13 scotty ns-proxy[2745]: [ID 461630 user.crit] gethostans: possible attempt to exploit buffer overflow while looking up t5.tagstat.com
    Dec 5 07:30:53 scotty ns-proxy[11351]: [ID 461630 user.crit] gethostans: possible attempt to exploit buffer overflow while looking up www.muslimguardian.com
    Dec 5 10:07:37 scotty ns-proxy[2425]: [ID 461630 user.crit] gethostans: possible attempt to exploit buffer overflow while looking up www.bna.bh
    i am using proxy server 3.6 sp8 on solaris 9 box
    What does the above message correspond to?
    How can i get rid of it?
    Thanks,
    Scotty

    To be more specific this is triggered by Sendmail Data Header Overflow (ID 3115) and destination port is tcp 25.

  • ISAKMP spi size buffer overflow for PIX 506e

    Hello,
    We have perform a vulnerability scan for our network and found a high risk vulnerability result as stated below:
    "H IsakmpSpiSizeBo: ISAKMP spi size buffer overflow
    Additional Information More Information
    Internet Security Association and Key Management Protocol (ISAKMP) is a key exchange protocol signature. ISAKMP is vulnerable to a
    buffer overflow. A remote attacker can send a specially-crafted ISAKMP payload to a vulnerable VPN client or server to overflow a buffer
    and execute arbitrary code on the system, possibly with administrative privileges.
    The supported operating systems in the Platforms Affected list are only vulnerable if they use the LibKmp ISAKMP library. Only VPN
    or firewall products which implement the Entrust LibKmp ISAKMP library are vulnerable.
    Remedy:
    Apply the appropriate hotfix for this vulnerability, as listed in the Symantec Security Response SYM04-012 and available from the
    Symantec FTP Update Web site. See References."
    I have search it on cisco but found no clue on resolving the issue. Our firewall is PIX 506E model.
    Your inputs are highly appreciated.
    Thank you
    Neil

    The cause of the issue was the remote peer, the parameters of phase 2 were wrong

  • Problem with installation application server 10g on Solaris 10 sparc

    Hello all.
    Help me, please.
    I'm trying to install Oracle aplication server 10.0.1.2.0.2 on Solaris 10 sparc.
    Server - Sun Fire v210.
    When i install oracle infrastructure(metadata repository and identify management),
    i have a problem - on first step of configuration "end of communication channel".
    Failed
    Anybody know, how solve this problem?
    Sorry for my english.

    There is known bug in installing Oracle10gAS infra. You have to apply the following note during the installation.
    see MetaLink Note:330016.1 for current AS 10.1.2 installation requirements for Solaris 10.
    Regards,
    Amir

  • Oracle 10g R2 installation on sun solaris 10 Sparc machine

    Hi there,
    I encountered the following problem during oracle 10g R2 installation on sun solaris 10 Sparc machine
    Error encountered:
    Using paramFile: /u01/Oracle/10gr2_db_sol/install/oraparam.ini
    Checking installer requirements...
    Checking operating system version: must be 5.8, 5.9 or 5.10. Actual 5.10
    Passed
    Checking Temp space: must be greater than 250 MB. Actual 2266 MB Passed
    Checking swap space: must be greater than 500 MB. Actual 2335 MB Passed
    Checking monitor: must be configured to display at least 256 colors Failed <<<<
    >>> Could not execute auto check for display colors using command /usr/openwin/bin/xdpyinfo. Check if the DISPLAY variable is set.
    Some requirement checks failed. You must fulfill these requirements before
    continuing with the installation,at which time they will be rechecked.
    Continue? (y/n) [n]
    The following were the steps taken before encountering the above error
    1. logged into a workstation
    2. From its xterm terminal I logged to the oracle server via ssh oracle@ip
    3. keyed in the following at the command prompt
    DISPLAY=machine_name:0.0; export DISPLAY
    4. executed the following from the command prompt
    ./runInstaller
    Note: when executing the ./runInstaller, the preinstallation checking just hangs at Checking monitor: must be configured to display at least 256 colors. But the log file shows it failed during preinstallation checking as shown in Error encountered
    Please help me with this problem.
    Thank you
    Ravindran Kanniah

    It is because of UNIX shell. I also faced this error during installation.
    First check your shell by the following command.
    $ echo $SHELL
    Then select the below.
    For csh shell
    $ setenv DISPLAY 192.168.1.128:0.0
    $ export DISPLAY
    For sh,ksh and bash
    $ DISPLAY=192.168.1.128:0.0
    $ export DISPLAY
    After you do this check the value of DISPLAY variable.
    $ echo $DISPLAY
    If the DISPLAY variable is set then run ./runInstaller.
    One advice: Keep a complete log of your terminal session. This will help you in future :)
    -aijaz

  • XMLTRANSFORM Too large stylesheet - code buffer overflow issue

    Hi All,
    My question is related to MSWordML generation from PLSQL stored procedure.
    1. I have table, containing XSLT stylesheets for different documents
    2. PLSQL stored procedure is generating dynamic content depending on some params and at the end I'm using
    SELECT XMLTRANSFORM(XMLTYPE.createxml(db_data_clob), XMLTYPE.createxml(x.xslt_clob)).GetClobVal()
    INTO   res
    FROM   msword_ml_data x
    WHERE  x.report_id = rep_id_variable;
    where : x.xslt_clob -> column, containing XSLT CLOB
    db_data_clob -> dynamic content CLOB
    res -> CLOB result
    All this was working fine on Oracle11gR1, but I had to reinstall database and I said why not install Oracle11gR2 ...
    Guess what. Stored procedure is raising exception when using XMLTRANSFORM :
    Exception : : ORA-31011: XML parsing failed
    ORA-19202: Error occurred in XML processing
    LPX-00004: internal error "Too large stylesheet - code buffer overflow"
    Google says nothing about it. I don't recall setting some special DB property in Oracle11gR1.
    Has anyone encountered this ?
    I haven't changed procedure nor table.
    I'm using exactly the same XSLT's from Java code and they are working just fine, so they are not the reason. My guess is that something in Oracle11gR2 related to XML processing is changed.
    If anyone could help, thanks in advance

    For those who are interested.
    I have logged a service request and it turned out that this is is a bug in Oracle 11gR2.
    "The limitation on the style sheet is not exactly a size limit but a limitation on the number of style sheet instructions and depends on the way the style sheet has been written. This is a C based parser limitation"
    Anyway, the workaround is to create Java stored procedure and do transformation from there.

  • Spool file error - Buffer Overflow

    I've a sql script that is running from a.sql file. The script fetches almost 9 million data as a result of the query. Main problem is related to spool file generation. It is saying buffer overflow. But, when i write that query from sql prompts it is running within 2 mins and completes the task within 15 mins.
    I've written -
    set serveroutput on size ######
    But, still it is not working. Total application is freeze whenever i want to run it. Tell me any suggestion if u have.
    Satyaki.

    i guess what you are more concerned with is the output produced by your query (the spool file).
    you need not to see what is displayed on the screen all you need is open up the spool file to
    check for those data in there.
    to suppress the output from the screen and still generates spool file. use the SET TERMOUT option.
    e.g.
    -- code for a producing a sample spool file
    spool r:\sample_spool.txt;
    select * from emp;
    spool off;
    at the SQL*Plus command line:
    SQL> @r:\sample_spool.sql;
         EMPNO ENAME      JOB              MGR HIREDATE         SAL       COMM     DEPTNO
          7566 JONES      MANAGER         7839 02-APR-81       2975       1000         20
          7902 FORD       ANALYST         7566 03-DEC-81       3000                    20
          7839 KING       PRESIDENT            17-NOV-81       5000                    10
          7698 BLAKE      MANAGER         7839 01-MAY-81       2850                    30
          7782 CLARK      MANAGER         7839 09-JUN-81       2450                    10
          7369 SMITH      CLERK           7902 17-DEC-80        800                    20
          7499 ALLEN      SALESMAN        7698 20-FEB-81       1600        300         30
          7521 WARD       SALESMAN        7698 22-FEB-81       1250        500         30
          7654 MARTIN     SALESMAN        7698 28-SEP-81       1250       1400         30
          7788 SCOTT      ANALYST         7566 09-DEC-82       3000                    20
          7844 TURNER     SALESMAN        7698 08-SEP-81       1500          0         30
          7876 ADAMS      CLERK           7788 12-JAN-83       1100                    20
          7900 JAMES      CLERK           7698 03-DEC-81        950                    30
          7934 MILLER     CLERK           7782 23-JAN-82       1300                    10
    14 rows selected.
    SQL> -- the above example displays the output on the screen
    SQL> -- now we want to turn it off by using the SET TERMOUT option
    SQL> SQL> set termout off;
    SQL> @r:\sample_spool.sql;
    SQL>
    after executing the script sample_spool.sql it does not display output from the screen which
    we want to avoid the buffer overflow error. and still produce the spool file:
         EMPNO ENAME      JOB              MGR HIREDATE         SAL       COMM     DEPTNO                                  
          7566 JONES      MANAGER         7839 02-APR-81       2975       1000         20                                  
          7902 FORD       ANALYST         7566 03-DEC-81       3000                    20                                  
          7839 KING       PRESIDENT            17-NOV-81       5000                    10                                  
          7698 BLAKE      MANAGER         7839 01-MAY-81       2850                    30                                  
          7782 CLARK      MANAGER         7839 09-JUN-81       2450                    10                                  
          7369 SMITH      CLERK           7902 17-DEC-80        800                    20                                  
          7499 ALLEN      SALESMAN        7698 20-FEB-81       1600        300         30                                  
          7521 WARD       SALESMAN        7698 22-FEB-81       1250        500         30                                  
          7654 MARTIN     SALESMAN        7698 28-SEP-81       1250       1400         30                                  
          7788 SCOTT      ANALYST         7566 09-DEC-82       3000                    20                                  
          7844 TURNER     SALESMAN        7698 08-SEP-81       1500          0         30                                  
          7876 ADAMS      CLERK           7788 12-JAN-83       1100                    20                                  
          7900 JAMES      CLERK           7698 03-DEC-81        950                    30                                  
          7934 MILLER     CLERK           7782 23-JAN-82       1300                    10                                  
    14 rows selected.

  • Weblogic 10.3.0 on Solaris 10 Sparc

    Hello,
    Need Help!!!!
    I have installed WL 10.3.0 on Solaris 10 Sparc 64bits and i have this Error:
    <May 31, 2010 6:51:56 PM WEST> <Warning> <Socket> <BEA-000444> <Could not load the performance pack that can take advantage of /dev/(e
    )poll device due to:
    java.lang.NegativeArraySizeException.
    Will attempt to use the performance pack that does not depend on /dev/(e)poll device.>
    # A fatal error has been detected by the Java Runtime Environment:
    # SIGSEGV (0xb) at pc=0xffffffff08b04e68, pid=5539, tid=74
    # JRE version: 6.0_20-b02
    # Java VM: Java HotSpot(TM) 64-Bit Server VM (16.3-b01 mixed mode solaris-sparc )
    # Problematic frame:
    # C [libmuxer.so+0x4e68]
    # An error report file with more information is saved as:
    # /app/weblogic/domains/smpftth/hs_err_pid5539.log
    # If you would like to submit a bug report, please visit:
    # http://java.sun.com/webapps/bugreport/crash.jsp
    # The crash happened outside the Java Virtual Machine in native code.
    # See problematic frame for where to report the bug.
    Does any one knows how to help me?

    Here is the text from the download site from 10.3.3 that applies to 10.3.0 as well:
    Note: This table includes links to WebLogic Server installers that include 32-bit JVMs for the platform
    in question, and links to WebLogic Server generic installers that can be used on any supported platform.
    To use WebLogic Server with 64-bit JVM's on Linux and Solaris or to use WLS on other supported
    platforms, use the WebLogic Server generic installer listed under "Additional Platforms". The generic
    installers do not include a JVM/JDK. For instructions on using the generic installers, see this document.
    So regardless whether the OS is 64bit or not, you need to select the installer on whether you are running WebLogic Server in a 32bit JVM or a 64bit JVM. If you run in a 32bit JVM, you can use the 32bit binary installer for Solaris that has a .bin extension. If you are going to run a 64bit JVM, then you need to download the "generic" .jar installer and separately download the supported 64bit JDK and follow the instructions similar to this, but for 10.3.0.
    http://download.oracle.com/docs/cd/E14571_01/doc.1111/e14142/guimode.htm#BABGFAAF
    On edelivery.oracle.com, select Oracle Fusion Middleware, then Oracle® Application Server 10g Release 3 (10.1.3) Media Pack for Oracle Solaris on SPARC (64-bit)
    32bit native Solaris installer for 10.3.0 is Part Number V13618-01
    64bit generic installer for 10.3.0 is Part Number V13672-01

  • How I can emulate Solaris 10 sparc on a Virtual Machine?

    Hi for all.
    Guys, I need to emulate an environment Solaris 10 in my job. We have an application that just run in this kind of environment. But, I found some problems when I try to install Solaris 10 Sparc on Virtual Box. I think that the problem is the type of architecture that are differents.
    So, someone knows a way to emulate Solaris 10 sparc architecture on a Virtual Machine. Doesn't matter the Virtual Machine application (Virtual Box, VMWare, etc..). Somebody Help me?

    HI Srini_Chavali
    I'm using the Solaris 10 u11.
    In fact, Virtual Box supports Solaris u6 and higher. I have an installation of Virtual Box running Solaris x86. But, the problem occurs when I try to create a Virtual machine to work with Solaris 10 Sparc architecture.
    The errors that appears on the screen are:
    "No bootable medium found! System Halted" and "FATAL: Could not read from the boot medium! System halted"
    This error occurs just with Architecture sparc.

  • Tiger to Snow Leopard upgrade fails  with buffer overflow

    I'm not sure where to proceed with the following situation:
    I have a 17" MB pro with 1GB memory and 22GB free hard drive space. I booted into the installer from the CD and stepped through the prompts without changing any options to the point where the install starts doing it's magic. Shortly after starting, the install will crash complaining about a buffer overflow during/just after the part where it's finding system files.
    I originally tried to do this with only 10GB free, but after the first failure, I did a repair disk using the Disk Utility and removed a bunch of really old files I no longer needed, which brought the available disk space to 22GB, but this did not help anything. At this point, I'm not sure what to do. I use Carbon Copy Cloner as a backup so I can do a full wipe and install, however I would prefer to avoid that as it is a lot of work to get things back.
    Any assistance is greatly appreciated!
    Error log follows. I cut out a lot of stuff so please let me know if that detail is needed.
    Sep 10 10:35:26 localhost OSInstaller[142]: Total install size including padding: 7325778944 b
    Sep 10 10:35:28 localhost OSInstaller[142]: Starting installation:
    Sep 10 10:35:28 localhost OSInstaller[142]: Calculating expected install size requirements
    Sep 10 10:35:28 localhost Unknown[84]: 2009-09-10 10:35:28.624 Mac OS X Installer[142:c607] Looking for system packages
    Sep 10 10:35:42 localhost Unknown[84]: 2009-09-10 10:35:42.115 Mac OS X Installer[142:c607] Finding system files...
    Sep 10 10:36:01 localhost Unknown[84]: buffer overflow!
    Sep 10 10:37:55 localhost LCA[83]: Child exited with status 6
    Sep 10 10:37:59 localhost Unknown[162]: Launching the Installer Crash Log Viewer
    Sep 10 10:38:32 localhost ReportCrash[159]: Process: Mac OS X Installer [142]
    Sep 10 10:38:32 localhost ReportCrash[159]: Path: /System/Installation/CDIS/Mac OS X Installer.app/Contents/MacOS/Mac OS X Installer
    Sep 10 10:38:32 localhost ReportCrash[159]: Identifier: Mac OS X Installer
    Sep 10 10:38:32 localhost ReportCrash[159]: Version: ??? (???)
    Sep 10 10:38:32 localhost ReportCrash[159]: Code Type: X86 (Native)
    Sep 10 10:38:32 localhost ReportCrash[159]: Parent Process: LCA [83]
    Sep 10 10:38:32 localhost ReportCrash[159]:
    Sep 10 10:38:32 localhost ReportCrash[159]: Date/Time: 2009-09-10 10:36:12.446 -0700
    Sep 10 10:38:32 localhost ReportCrash[159]: OS Version: Mac OS X 10.6 (10A432)
    Sep 10 10:38:32 localhost ReportCrash[159]: Report Version: 6
    Sep 10 10:38:32 localhost ReportCrash[159]:
    Sep 10 10:38:32 localhost ReportCrash[159]: Exception Type: EXC_CRASH (SIGABRT)
    Sep 10 10:38:32 localhost ReportCrash[159]: Exception Codes: 0x0000000000000000, 0x0000000000000000
    Sep 10 10:38:32 localhost ReportCrash[159]: Crashed Thread: 9
    Sep 10 10:38:32 localhost ReportCrash[159]:
    Sep 10 10:38:32 localhost ReportCrash[159]: Application Specific Information:
    Sep 10 10:38:32 localhost ReportCrash[159]: abort() called
    Sep 10 10:38:32 localhost ReportCrash[159]:
    Sep 10 10:38:32 localhost ReportCrash[159]: Thread 0: Dispatch queue: com.apple.main-thread
    Sep 10 10:38:32 localhost ReportCrash[159]: 0 libSystem.B.dylib 0x002b78fa machmsgtrap + 10
    Sep 10 10:38:32 localhost ReportCrash[159]: 1 libSystem.B.dylib 0x002b8067 mach_msg + 68
    Sep 10 10:38:32 localhost ReportCrash[159]: 2 com.apple.CoreFoundation 0x005d9dbf __CFRunLoopRun + 2447
    Sep 10 10:38:32 localhost ReportCrash[159]: 3 com.apple.CoreFoundation 0x005d8d34 CFRunLoopRunSpecific + 452
    Sep 10 10:38:32 localhost ReportCrash[159]: 4 com.apple.CoreFoundation 0x005d8b61 CFRunLoopRunInMode + 97
    Sep 10 10:38:32 localhost ReportCrash[159]: 5 com.apple.HIToolbox 0x05143fec RunCurrentEventLoopInMode + 392
    Sep 10 10:38:32 localhost ReportCrash[159]: 6 com.apple.HIToolbox 0x05143da3 ReceiveNextEventCommon + 354
    Sep 10 10:38:32 localhost ReportCrash[159]: 7 com.apple.HIToolbox 0x05143c28 BlockUntilNextEventMatchingListInMode + 81
    Sep 10 10:38:32 localhost ReportCrash[159]: 8 com.apple.AppKit 0x00bdbb99 _DPSNextEvent + 847
    Sep 10 10:38:32 localhost ReportCrash[159]: 9 com.apple.AppKit 0x00bdb40e -[NSApplication nextEventMatchingMask:untilDate:inMode:dequeue:] + 156
    Sep 10 10:38:32 localhost ReportCrash[159]: 10 com.apple.AppKit 0x00b9d5fb -[NSApplication run] + 821
    Sep 10 10:38:32 localhost ReportCrash[159]: 11 com.apple.AppKit 0x00b95695 NSApplicationMain + 574
    Sep 10 10:38:32 localhost ReportCrash[159]: 12 com.apple.MacOSXInstaller 0x00006393 0x1000 + 21395
    Sep 10 10:38:32 localhost ReportCrash[159]: 13 com.apple.MacOSXInstaller 0x00002f25 0x1000 + 7973
    Sep 10 10:38:32 localhost ReportCrash[159]:
    Sep 10 10:38:32 localhost ReportCrash[159]: Thread 1:
    Sep 10 10:38:32 localhost ReportCrash[159]: 0 libSystem.B.dylib 0x002e582a _semwaitsignal + 10
    Sep 10 10:38:32 localhost ReportCrash[159]: 1 libSystem.B.dylib 0x00311681 nanosleep$UNIX2003 + 188
    Sep 10 10:38:32 localhost ReportCrash[159]: 2 libSystem.B.dylib 0x00347872 sleep$UNIX2003 + 63
    Sep 10 10:38:32 localhost ReportCrash[159]: 3 com.apple.installframework 0x000abe13 dologwatch + 51
    Sep 10 10:38:32 localhost ReportCrash[159]: 4 libSystem.B.dylib 0x002e4fe1 pthreadstart + 345
    Sep 10 10:38:32 localhost ReportCrash[159]: 5 libSystem.B.dylib 0x002e4e66 thread_start + 34
    Sep 10 10:38:32 localhost ReportCrash[159]:
    Sep 10 10:38:32 localhost ReportCrash[159]: Thread 2: Dispatch queue: com.apple.libdispatch-manager
    Sep 10 10:38:32 localhost ReportCrash[159]: 0 libSystem.B.dylib 0x002de10a kevent + 10
    Sep 10 10:38:32 localhost ReportCrash[159]: 1 libSystem.B.dylib 0x002de824 dispatch_mgrinvoke + 215
    Sep 10 10:38:32 localhost ReportCrash[159]: 2 libSystem.B.dylib 0x002ddce1 dispatch_queueinvoke + 163
    Sep 10 10:38:32 localhost ReportCrash[159]: 3 libSystem.B.dylib 0x002dda86 dispatch_workerthread2 + 234
    Sep 10 10:38:32 localhost ReportCrash[159]: 4 libSystem.B.dylib 0x002dd511 pthreadwqthread + 390
    Sep 10 10:38:32 localhost ReportCrash[159]: 5 libSystem.B.dylib 0x002dd356 start_wqthread + 30
    Sep 10 10:38:32 localhost ReportCrash[159]:
    Sep 10 10:38:32 localhost ReportCrash[159]: Thread 3:
    Sep 10 10:38:32 localhost ReportCrash[159]: 0 libSystem.B.dylib 0x002b78fa machmsgtrap + 10
    Sep 10 10:38:32 localhost ReportCrash[159]: 1 libSystem.B.dylib 0x002b8067 mach_msg + 68
    Sep 10 10:38:32 localhost ReportCrash[159]: 2 com.apple.CoreFoundation 0x005d9dbf __CFRunLoopRun + 2447
    Sep 10 10:38:32 localhost ReportCrash[159]: 3 com.apple.CoreFoundation 0x005d8d34 CFRunLoopRunSpecific + 452
    Sep 10 10:38:32 localhost ReportCrash[159]: 4 com.apple.CoreFoundation 0x005d8b61 CFRunLoopRunInMode + 97
    Sep 10 10:38:32 localhost ReportCrash[159]: 5 com.apple.Foundation 0x00863498 +[NSURLConnection(NSURLConnectionReallyInternal) _resourceLoadLoop:] + 329
    Sep 10 10:38:32 localhost ReportCrash[159]: 6 com.apple.Foundation 0x0082a964 -[NSThread main] + 45
    Sep 10 10:38:32 localhost ReportCrash[159]: 7 com.apple.Foundation 0x0082a914 _NSThread__main_ + 1499
    Sep 10 10:38:32 localhost ReportCrash[159]: 8 libSystem.B.dylib 0x002e4fe1 pthreadstart + 345
    Sep 10 10:38:32 localhost ReportCrash[159]: 9 libSystem.B.dylib 0x002e4e66 thread_start + 34
    Sep 10 10:38:32 localhost ReportCrash[159]:
    Sep 10 10:38:32 localhost ReportCrash[159]: Thread 4:
    Sep 10 10:38:32 localhost ReportCrash[159]: 0 libSystem.B.dylib 0x002b78fa machmsgtrap + 10
    Sep 10 10:38:32 localhost ReportCrash[159]: 1 libSystem.B.dylib 0x002b8067 mach_msg + 68
    Sep 10 10:38:32 localhost ReportCrash[159]: 2 com.apple.CoreFoundation 0x005d9dbf __CFRunLoopRun + 2447
    Sep 10 10:38:32 localhost ReportCrash[159]: 3 com.apple.CoreFoundation 0x005d8d34 CFRunLoopRunSpecific + 452
    Sep 10 10:38:32 localhost ReportCrash[159]: 4 com.apple.CoreFoundation 0x005d8b61 CFRunLoopRunInMode + 97
    Sep 10 10:38:32 localhost ReportCrash[159]: 5 com.apple.Foundation 0x008643e4 -[NSRunLoop(NSRunLoop) runMode:beforeDate:] + 279
    Sep 10 10:38:32 localhost ReportCrash[159]: 6 com.apple.Foundation 0x008b93c8 -[NSRunLoop(NSRunLoop) runUntilDate:] + 79
    Sep 10 10:38:32 localhost ReportCrash[159]: 7 com.apple.osinstallframework 0x0002dbc3 -[OSPreInstallSizingQueueElement _calculateReapedFreeSpace] + 176
    Sep 10 10:38:32 localhost ReportCrash[159]: 8 com.apple.osinstallframework 0x0002e1dd -[OSPreInstallSizingQueueElement run] + 178
    Sep 10 10:38:32 localhost ReportCrash[159]: 9 com.apple.installframework 0x0007be54 -[IFSession(Jobs) _runMetaQueueEngine] + 1594
    Sep 10 10:38:32 localhost ReportCrash[159]: 10 com.apple.Foundation 0x0082a964 -[NSThread main] + 45
    Sep 10 10:38:32 localhost ReportCrash[159]: 11 com.apple.Foundation 0x0082a914 _NSThread__main_ + 1499
    Sep 10 10:38:32 localhost ReportCrash[159]: 12 libSystem.B.dylib 0x002e4fe1 pthreadstart + 345
    Sep 10 10:38:32 localhost ReportCrash[159]: 13 libSystem.B.dylib 0x002e4e66 thread_start + 34
    Sep 10 10:38:32 localhost ReportCrash[159]:
    Sep 10 10:38:32 localhost ReportCrash[159]: Thread 5:
    Sep 10 10:38:32 localhost ReportCrash[159]: 0 libSystem.B.dylib 0x002b795a semaphoretimedwait_signaltrap + 10
    Sep 10 10:38:32 localhost ReportCrash[159]: 1 libSystem.B.dylib 0x002e5469 pthread_condwait + 1066
    Sep 10 10:38:32 localhost ReportCrash[159]: 2 libSystem.B.dylib 0x00314268 pthreadcond_timedwait_relativenp + 47
    Sep 10 10:38:32 localhost ReportCrash[159]: 3 com.apple.Foundation 0x00866aec -[NSCondition waitUntilDate:] + 453
    Sep 10 10:38:32 localhost ReportCrash[159]: 4 com.apple.Foundation 0x0081f881 -[NSConditionLock lockWhenCondition:beforeDate:] + 279
    Sep 10 10:38:32 localhost ReportCrash[159]: 5 com.apple.Foundation 0x0081f764 -[NSConditionLock lockWhenCondition:] + 69
    Sep 10 10:38:32 localhost ReportCrash[159]: 6 com.apple.installframework 0x0006aef6 +[IFDTargetController(WorkerThread) _handleTargetRequests] + 1169
    Sep 10 10:38:32 localhost ReportCrash[159]: 7 com.apple.Foundation 0x0082a964 -[NSThread main] + 45
    Sep 10 10:38:32 localhost ReportCrash[159]: 8 com.apple.Foundation 0x0082a914 _NSThread__main_ + 1499
    Sep 10 10:38:32 localhost ReportCrash[159]: 9 libSystem.B.dylib 0x002e4fe1 pthreadstart + 345
    Sep 10 10:38:32 localhost ReportCrash[159]: 10 libSystem.B.dylib 0x002e4e66 thread_start + 34
    Sep 10 10:38:32 localhost ReportCrash[159]:
    Sep 10 10:38:32 localhost ReportCrash[159]: Thread 6:
    Sep 10 10:38:32 localhost ReportCrash[159]: 0 libSystem.B.dylib 0x002e582a _semwaitsignal + 10
    Sep 10 10:38:32 localhost ReportCrash[159]: 1 libSystem.B.dylib 0x00311681 nanosleep$UNIX2003 + 188
    Sep 10 10:38:32 localhost ReportCrash[159]: 2 com.apple.Foundation 0x008b4c30 +[NSThread sleepForTimeInterval:] + 123
    Sep 10 10:38:32 localhost ReportCrash[159]: 3 com.apple.SystemMigration 0x01a04b69 -[SMManager _suppressSpotlightThread:] + 104
    Sep 10 10:38:32 localhost ReportCrash[159]: 4 com.apple.Foundation 0x0082a964 -[NSThread main] + 45
    Sep 10 10:38:32 localhost ReportCrash[159]: 5 com.apple.Foundation 0x0082a914 _NSThread__main_ + 1499
    Sep 10 10:38:32 localhost ReportCrash[159]: 6 libSystem.B.dylib 0x002e4fe1 pthreadstart + 345
    Sep 10 10:38:32 localhost ReportCrash[159]: 7 libSystem.B.dylib 0x002e4e66 thread_start + 34
    Sep 10 10:38:32 localhost ReportCrash[159]:
    Sep 10 10:38:32 localhost ReportCrash[159]: Thread 7:
    Sep 10 10:38:32 localhost ReportCrash[159]: 0 libSystem.B.dylib 0x002d6876 select$DARWIN_EXTSN + 10
    Sep 10 10:38:32 localhost ReportCrash[159]: 1 com.apple.CoreFoundation 0x0061904d __CFSocketManager + 1085
    Sep 10 10:38:32 localhost ReportCrash[159]: 2 libSystem.B.dylib 0x002e4fe1 pthreadstart + 345
    Sep 10 10:38:32 localhost ReportCrash[159]: 3 libSystem.B.dylib 0x002e4e66 thread_start + 34
    Sep 10 10:38:32 localhost ReportCrash[159]:
    Sep 10 10:38:32 localhost ReportCrash[159]: Thread 8:
    Sep 10 10:38:32 localhost ReportCrash[159]: 0 libSystem.B.dylib 0x002b78fa machmsgtrap + 10
    Sep 10 10:38:32 localhost ReportCrash[159]: 1 libSystem.B.dylib 0x002b8067 mach_msg + 68
    Sep 10 10:38:32 localhost ReportCrash[159]: 2 com.apple.CoreFoundation 0x005d9dbf __CFRunLoopRun + 2447
    Sep 10 10:38:32 localhost ReportCrash[159]: 3 com.apple.CoreFoundation 0x005d8d34 CFRunLoopRunSpecific + 452
    Sep 10 10:38:32 localhost ReportCrash[159]: 4 com.apple.CoreFoundation 0x005d8b61 CFRunLoopRunInMode + 97
    Sep 10 10:38:32 localhost ReportCrash[159]: 5 com.apple.Foundation 0x008643e4 -[NSRunLoop(NSRunLoop) runMode:beforeDate:] + 279
    Sep 10 10:38:32 localhost ReportCrash[159]: 6 com.apple.Foundation 0x008b93c8 -[NSRunLoop(NSRunLoop) runUntilDate:] + 79
    Sep 10 10:38:32 localhost ReportCrash[159]: 7 com.apple.installframework 0x0007d48d -[IFDInstallController(Private) _install] + 1561
    Sep 10 10:38:32 localhost ReportCrash[159]: 8 com.apple.osinstallframework 0x00018ccc -[OSInstallController(Private) _install] + 552
    Sep 10 10:38:32 localhost ReportCrash[159]: 9 com.apple.Foundation 0x0082a964 -[NSThread main] + 45
    Sep 10 10:38:32 localhost ReportCrash[159]: 10 com.apple.Foundation 0x0082a914 _NSThread__main_ + 1499
    Sep 10 10:38:32 localhost ReportCrash[159]: 11 libSystem.B.dylib 0x002e4fe1 pthreadstart + 345
    Sep 10 10:38:32 localhost ReportCrash[159]: 12 libSystem.B.dylib 0x002e4e66 thread_start + 34
    Sep 10 10:38:32 localhost ReportCrash[159]:
    Sep 10 10:38:32 localhost ReportCrash[159]: Thread 9 Crashed:
    Sep 10 10:38:32 localhost ReportCrash[159]: 0 libSystem.B.dylib 0x00324c8e _semwait_signalnocancel + 10
    Sep 10 10:38:32 localhost ReportCrash[159]: 1 libSystem.B.dylib 0x00324b72 nanosleep$NOCANCEL$UNIX2003 + 166
    Sep 10 10:38:32 localhost ReportCrash[159]: 2 libSystem.B.dylib 0x003a05b2 usleep$NOCANCEL$UNIX2003 + 61
    Sep 10 10:38:32 localhost ReportCrash[159]: 3 libSystem.B.dylib 0x003c1c68 abort + 105
    Sep 10 10:38:32 localhost ReportCrash[159]: 4 com.apple.bom 0x0194fb3d _defaultHandler + 64
    Sep 10 10:38:32 localhost ReportCrash[159]: 5 com.apple.bom 0x0194fa8f _BOMExceptionHandlerCall + 89
    Sep 10 10:38:32 localhost ReportCrash[159]: 6 com.apple.bom 0x01971c01 BOMStreamReadUInt32 + 134
    Sep 10 10:38:32 localhost ReportCrash[159]: 7 com.apple.bom 0x01954e40 BOMBomOpen + 226
    Sep 10 10:38:32 localhost ReportCrash[159]: 8 com.apple.PackageKit 0x019a98e7 -[PKBOM initWithBOMPath:] + 148
    Sep 10 10:38:32 localhost ReportCrash[159]: 9 com.apple.PackageKit 0x019b82fe -[PKReceipt(Private) _BOM] + 77
    Sep 10 10:38:32 localhost ReportCrash[159]: 10 com.apple.PackageKit 0x019b7d55 -[PKReceipt(Private) _directoryEnumerator] + 34
    Sep 10 10:38:32 localhost ReportCrash[159]: 11 com.apple.SystemMigration 0x01a4deff -[SMFindSystemFiles _findSystemPaths] + 1785
    Sep 10 10:38:32 localhost ReportCrash[159]: 12 com.apple.SystemMigration 0x01a4e490 -[SMFindSystemFiles systemPaths] + 796
    Sep 10 10:38:32 localhost ReportCrash[159]: 13 com.apple.SystemMigration 0x01a50387 -[SMPathAnalyzer prunedSystemPathsReturningSize:] + 179
    Sep 10 10:38:32 localhost ReportCrash[159]: 14 com.apple.SystemMigration 0x01a508ca -[SMPathAnalyzer prunedReaperPathsReturningSize:] + 53
    Sep 10 10:38:32 localhost ReportCrash[159]: 15 com.apple.osinstallframework 0x00028807 -[IFDiskObject(OSExtensions) calculateReapedFreeSpace] + 404
    Sep 10 10:38:32 localhost ReportCrash[159]: 16 com.apple.osinstallframework 0x0002daf4 -[OSPreInstallSizingQueueElement _calculateReapedFreeSpaceThread] + 71
    Sep 10 10:38:32 localhost ReportCrash[159]: 17 com.apple.Foundation 0x0082a964 -[NSThread main] + 45
    Sep 10 10:38:32 localhost ReportCrash[159]: 18 com.apple.Foundation 0x0082a914 _NSThread__main_ + 1499
    Sep 10 10:38:32 localhost ReportCrash[159]: 19 libSystem.B.dylib 0x002e4fe1 pthreadstart + 345
    Sep 10 10:38:32 localhost ReportCrash[159]: 20 libSystem.B.dylib 0x002e4e66 thread_start + 34
    Sep 10 10:38:32 localhost ReportCrash[159]:
    Sep 10 10:38:32 localhost ReportCrash[159]: Thread 9 crashed with X86 Thread State (32-bit):
    Sep 10 10:38:32 localhost ReportCrash[159]: eax: 0x0000003c ebx: 0x00324ad9 ecx: 0xb04aa82c edx: 0x00324c8e
    Sep 10 10:38:32 localhost ReportCrash[159]: edi: 0x00000000 esi: 0xb04aa888 ebp: 0xb04aa868 esp: 0xb04aa82c
    Sep 10 10:38:32 localhost ReportCrash[159]: ss: 0x0000001f efl: 0x00000247 eip: 0x00324c8e cs: 0x00000007
    Sep 10 10:38:32 localhost ReportCrash[159]: ds: 0x0000001f es: 0x0000001f fs: 0x0000001f gs: 0x00000037
    Sep 10 10:38:32 localhost ReportCrash[159]: cr2: 0xffe2a178
    Sep 10 10:38:32 localhost ReportCrash[159]:

    a brody wrote:
    Regarding the need to buy the packaged bundle, I keep seeing folks here and elsewhere claiming that is not necessary.
    That's because they have not read, or concern themselves with the license agreement. Section 2. "Permitted License Uses and Restrictions", section C says on http://images.apple.com/legal/sla/docs/macosx106.pdf
    It's been read forwards, backwards, and upside down. Nowhere on the packaging is there any identification of the $29 (or $49 family pack) version as only suitable as a "Leopard upgrade" version. There are vague mentions about it on Apple's online sales page and in press releases. I've read the license terms thoroughly and the only conclusion that could reasonably be conferred is that the $29 version carries a "single user" license simply because it doesn't say "family pack". There are plenty of reports that it installs over Tiger just fine.
    Granted I've read numerous reports and I installed my copy over Leopard. However - imagine someone who vaguely heard about it, walked into a store and bought a copy, thoroughly looked over the box and the license terms (within the disc), and installed it in good faith over Tiger. There is ZERO, ZIP, NADA on the package that would lead anyone to believe it is anything but a copy with a "SINGLE USER" license where the terms don't preclude installing over Tiger.
    C. Leopard Upgrade Licenses. If you have purchased an Upgrade for Mac OS X Leopard license, then subject to the terms and conditions of this License, you are granted a limited non-exclusive license to install, use and run one (1) copy of the Apple Software on a single Apple-branded computer as long as that computer has a properly licensed copy of *Mac OS X Leopard already installed on it.*
    The emphasis above is mine.
    While this may not be enforced by a software key, it is there in the license agreement on the PDF included on the CD, when you purchase the under $100 licenses, which are also called "Upgrade" on the store.
    There's an opinion that "Leopard upgrade" only applies to the "Up To Date" versions that require proof of purchase of a recent Mac computer. The reports on those installer discs are that they do in fact check for a valid Leopard installation.
    The following has the most in-depth discussion on the subject of whether or not the license allows for Snow Leopard over Tiger that I've seen so far:
    http://www.mackb.com/Uwe/Forum.aspx/mac/26361/the-29-purchase-price-of-Snow-Leop ard
    This is the best description I've heard on it, from someone who identifies himself as "David Empson":
    http://www.mackb.com/Uwe/Threads/Single.aspx/mac/26361?ArtId=1j5mofd.1pw6lllbtpj dwN%25dempson%40actrix.gen.nz
    If someone walks in and buys Snow Leopard, without written notice from
    Apple that they are buying an Upgrade version which requires Leopard,
    and without discussing that point with the seller, the buyer is under no
    obligation to have researched their purchase in advance and know all of
    Apple's publicity statements from three months ago.
    They are buying it in good faith, and the contract (licence) is valid.

Maybe you are looking for