<div dir="ltr">"Hitman" sounds rather self-descriptive. Not sure I'd allow such a thing onto any system under my control; it sounds pretty much like malware in its own right.</div><div class="gmail_extra"><br><div class="gmail_quote">On Thu, Dec 28, 2017 at 6:09 PM, <span dir="ltr"><<a href="mailto:lonetiger@gmail.com" target="_blank">lonetiger@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div lang="EN-US" link="blue" vlink="#954F72"><div class="m_-1767334114562303777WordSection1"><p class="MsoNormal"><u></u> <u></u></p><p class="MsoNormal">We have fixed this though, GHC 8.4 shouldn’t have this problem specifically. </p><p class="MsoNormal"><u></u> <u></u></p><p class="MsoNormal">The issue is that hitman pro is injecting itself into every process by throwing a signal,</p><p class="MsoNormal">Prior to 8.4 we were pretty aggressive in how we treated first chance exceptions. We’ve now relaxed this.</p><p class="MsoNormal"><u></u> <u></u></p><p class="MsoNormal">That said I find the behavior of HitmanPro to be quite intrusive and I wouldn’t trust anything injecting code</p><p class="MsoNormal">Into my address space.</p><p class="MsoNormal"><u></u> <u></u></p><p class="MsoNormal">Fyi, this is what it caused:</p><p class="MsoNormal"><u></u> <u></u></p><p class="MsoNormal"><span style="font-size:10.5pt;font-family:"Lato",serif;color:#444444">ExceptionAddress: 00007ffcc2b368ce (ntdll!RtlVirtualUnwind+<wbr>0x000000000000001e)<br>ExceptionCode: c0000005 (Access violation)<br>ExceptionFlags: 00000000<br>NumberParameters: 2<br>Parameter[0]: 0000000000000000<br>Parameter[1]: 00000000046710f6<br>Attempt to read from address 00000000046710f6<br>0:000> lmvm hmpalert<br>Browse full module list<br>start end module name<br>00007ffc`ba4b0000 00007ffc`ba595000 hmpalert (export symbols) hmpalert.dll<br>Loaded symbol image file: hmpalert.dll<br>Image path: C:\Windows\System32\hmpalert.<wbr>dll<br>Image name: hmpalert.dll<br>Browse all global symbols functions data<br>Timestamp: Mon Jul 17 15:53:17 2017 (596CCF5D)<br>CheckSum: 000F490C<br>ImageSize: 000E5000<br>File version: 3.6.8.604<br>Product version: 3.6.8.604<br>File flags: 0 (Mask 3F)<br>File OS: 40004 NT Win32<br>File type: 2.0 Dll<br>File date: 00000000.00000000<br>Translations: 0400.04b0<br>CompanyName: SurfRight B.V.<br>ProductName: HitmanPro.Alert<br>InternalName: hmpalert.dll<br>OriginalFilename: hmpalert_x64.dll<br>ProductVersion: 3.6.8.604<br>FileVersion: 3.6.8.604<br>FileDescription: HitmanPro.Alert 64-bit Support Library<br>LegalCopyright: © 2013-2017 SurfRight, a Sophos company<br>Comments: Incorporates Threatstar Exploit Mitigation Platform (EMP)</span></p><p class="MsoNormal"><u></u> <u></u></p><div style="border:none;border-top:solid #e1e1e1 1.0pt;padding:3.0pt 0in 0in 0in"><p class="MsoNormal" style="border:none;padding:0in"><b>From: </b><a href="mailto:gershomb@gmail.com" target="_blank">Gershom B</a><br><b>Sent: </b>Thursday, December 28, 2017 22:24<br><b>To: </b><a href="mailto:ghc-devs@haskell.org" target="_blank">ghc-devs@haskell.org Devs</a><br><b>Subject: </b>RE: Haskell Platform 8.2.2 - virus?</p></div><div><div class="h5"><p class="MsoNormal"><u></u> <u></u></p><p class="MsoNormal">Note that HitmanPro has caused plenty of problems with GHC in the</p><p class="MsoNormal">past, and should be avoided by Haskell devs:</p><p class="MsoNormal"><u></u> <u></u></p><p class="MsoNormal"><a href="https://www.reddit.com/r/haskell/comments/77from/gettting_segmentation_fault_on_stackcabal_any/" target="_blank">https://www.reddit.com/r/<wbr>haskell/comments/77from/<wbr>gettting_segmentation_fault_<wbr>on_stackcabal_any/</a></p><p class="MsoNormal"><u></u> <u></u></p><p class="MsoNormal"><a href="https://github.com/commercialhaskell/intero/issues/436" target="_blank">https://github.com/<wbr>commercialhaskell/intero/<wbr>issues/436</a></p><p class="MsoNormal">______________________________<wbr>_________________</p><p class="MsoNormal">ghc-devs mailing list</p><p class="MsoNormal"><a href="mailto:ghc-devs@haskell.org" target="_blank">ghc-devs@haskell.org</a></p><p class="MsoNormal"><a href="http://mail.haskell.org/cgi-bin/mailman/listinfo/ghc-devs" target="_blank">http://mail.haskell.org/cgi-<wbr>bin/mailman/listinfo/ghc-devs</a></p><p class="MsoNormal"><u></u> <u></u></p></div></div></div></div><br>______________________________<wbr>_________________<br>
ghc-devs mailing list<br>
<a href="mailto:ghc-devs@haskell.org">ghc-devs@haskell.org</a><br>
<a href="http://mail.haskell.org/cgi-bin/mailman/listinfo/ghc-devs" rel="noreferrer" target="_blank">http://mail.haskell.org/cgi-<wbr>bin/mailman/listinfo/ghc-devs</a><br>
<br></blockquote></div><br><br clear="all"><div><br></div>-- <br><div class="gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><div>brandon s allbery kf8nh sine nomine associates</div><div><a href="mailto:allbery.b@gmail.com" target="_blank">allbery.b@gmail.com</a> <a href="mailto:ballbery@sinenomine.net" target="_blank">ballbery@sinenomine.net</a></div><div>unix, openafs, kerberos, infrastructure, xmonad <a href="http://sinenomine.net" target="_blank">http://sinenomine.net</a></div></div></div>
</div>