From patman@ctron.com Fri Jan 26 08:15 MST 1996
Return-Path: <patman@ctron.com>
Received: from cs.utah.edu by sunset.cs.utah.edu (8.6.12/utah-2.15sun-leaf)
	id IAA29006; Fri, 26 Jan 1996 08:15:54 -0700
Received: from gatekeeper.ctron.com by cs.utah.edu (8.6.12/utah-2.21-cs)
	id IAA19527; Fri, 26 Jan 1996 08:14:40 -0700
Received: (from news@localhost) by gatekeeper.ctron.com (8.6.12/8.6.9) id KAA17278 for <gback@cs.utah.edu>; Fri, 26 Jan 1996 10:14:29 -0500
Received: from stealth.ctron.com(134.141.5.107) by gatekeeper via smap (V1.3mjr)
	id sma017247; Fri Jan 26 10:14:22 1996
Received: from express.ctron.com by stealth.ctron.com (4.1/SMI-4.1)
	id AA01120; Fri, 26 Jan 96 10:08:59 EST
Received: from patrick (patrick.ctron.com [134.141.58.32]) by express.ctron.com (8.6.9/8.6.9) with SMTP id KAA01342 for <gback@cs.utah.edu>; Fri, 26 Jan 1996 10:14:21 -0500
Message-Id: <3108EF85.F7D@ctron.com>
Date: Fri, 26 Jan 1996 10:13:09 -0500
From: Pat Mancuso <patman@ctron.com>
X-Mailer: Mozilla 2.0b6a (WinNT; I)
Mime-Version: 1.0
To: gback@cs
Subject: Here's the new patch location for 'how to bypass...' in 2.0b6 
X-Url: http://www.cs.utah.edu/~gback/
Content-Transfer-Encoding: 7bit
Content-Type: text/plain; charset=us-ascii
Content-Length: 899
Status: OR

I tried out your 'how to bypass netscape's security manager' patch in
the win32 version of 2.0B5, and it worked fine.  The patches needed
to be applied at the offsets you listed (0x6c946, 0x6c94c) for 2.0B5, 
but after upgrading to 2.0B6a, I found things have changed.  Here's the
new info:

C:\www\netscape\program\java\classes>diff before.hex after.hex
27807c27807
< 6c9d0 9900092a 04b50060 b12a05b5 0060b100 ...*...`.*...`..
---
> 6c9d0 9900092a 06b50060 b12a06b5 0060b100 ...*...`.*...`..

The new locations are offsets 0x6c9d4 and 0x6c9da in the zipfile.
This is for the win32 version of moz2_0.zip, filesize: 763745.

I tried your sendmail applet before and after my patch of 2.0B6, and 
it worked as expected in both cases (no before, yes after).

Now, do you have any patches to get the 'exec' call to work?  I've
got a demo to paste together today...

Thanks-

Pat Mancuso
patman@ctron.com