The primary benefit using this fail-safe C-Program API library over other application loggers, is that it does extensive runtime validation to prevent the application from crashing due to common programmers printf() style pitfalls or unpredictable execution segmentation faults. (e.g., string type %s using NULL, 0 or negative value).
Other programming language API will be made available.
In addition, if a runtime validation fails the API generates an error code and simply returns, allowing the application to continue normal processing (no need for the application to check/stop processing).
During runtime, the API uses a Bound Parameter approach to decode, analyze and validate execution behavior to ensure valid API usage, fail-safe execution and reliable log message generation.
Appreciate your Discussion input and recommendation on improving the Bound Parameter list.
This library is part of another effort to provide Secure Software Adaptable Logging currently does exist with other logging tools, utilities and systems.
The library API:
- uses C-Program print() style interface that is often used by programmers to log messages.
- decodes log message strings and arguments into element/value pairs.
- analyzes element/value pairs for accurate use of log message arguments.
- validates element/value pairs for unintentional programmer’s misuse of log argument.
- checks element/value pairs for some attackers printf() malicious patterns.
- generates log messages for development and deployment environments.
- provides robust, fail-safe and reliable API operations.
Quick how to use Wandi-SSAL API functions in C/C++ Program application.
- Details for LoggerStartUp() function.
- Details for LoggerAppsMsg() function.
- Details for LoggerShutDown() function.
Setup LoggerMessageDefines.txt file used by Wandi-SSAL API functions.
Refer to WandiSSAL-examples.c for detailed application examples using the Bound Capability Parameter Validation.
For Linux OS:
- download WandiSSAL-LoggerLib-2.0-linux-arm64-gnu.zip and WandiSSAL-LoggerLib-2.0-linux-arm64-gnu.zip.asc files.
- verify zip file integrity:
gpg --verify WandiSSAL-LoggerLib-2.0-linux-arm64-gnu.zip.asc WandiSSAL-LoggerLib-2.0-linux-arm64-gnu.zip - if OK then unzip file:
unzip WandiSSAL-LoggerLib-2.0-linux-arm64-gnu.zip - and refer to the README file for further installation and execution instructions.
Github repository for documentation and download
Contact: bwoodley@istech.com