FPiette

I never had any of my Delphi generated application flagged as malware. I use Delphi since version 1. I used all versions.

Could you tell us what you have done to solve the issue? Do you know that Delphi 12 will be available shortly?

Which OS are you using? Check if all updates have been installed. Disable any "security" product such as anti-virus, just the time to check.

Fundamentally, HTTP protocol is a session-less protocol. It mean that between request-answer cycle either all involved parties are free to close the connection (client, server and in-between items such as proxies). Building an application on the fact that sometimes it is possible to have the connection remaining open for "some (long) time" is really a bad idea. Actually, cookies have been invented to overcome the disconnected state and yet link consecutive requests to the same client.

Which is what I'll do for the first version, may experiment later with memory loading, but don't plan to spend much effort on it. Care should be taken concerning the directory where to extract the DLL. Usually the application are stored in a directory requiring admin permission to be written (Program Files). The DLL must be extracted to a writable directory. It could be specified in the application INI file (or registry) and/or located in some directory in the user profile (Somewhere in "AppData").

Thanks for your feedback. It's important for the community to have the final resolution.

There are global settings in the IDE. I have the "enterprise" edition. Maybe this makes a difference? Since the issue seems related to Overbyteicsavltrees, maybe you could try to build a very simple new project project calling it?

I have not done anything related to your issue. When something doesn't work, always use latest source. Useless to find any bug in older code. So I have done a quick test with latest source to check your issue and everything worked as expected. I guess the issue is related to your setup. The most probable is that you inadvertently changed some source code or some compiler/linker option. Maybe you have chance to check on another computer (or VM), preferably one where CBuilder is not yet installed.

I wouldn't know where to start. Install Tortoise SVN which is a friendly subversion client. Then follow Go for a Test Drive. Follow the steps in "Creating a repository", then "Import a project" and "Checking out a working copy". You need ICS svn url and password that you'll find on ICS wiki at the page for ICS download. Read the section "Version Control System". Once you have the working copy... start the work with it.

That's not what I have done. I updated my local source code using ICS subversion repository. Try that.

Thanks for your feedback!

Using Builder 11.3 ? Yes: Embarcadero® C++Builder 11 Version 28.0.47991.2819 Beside ICS, no add-on nor any third party component installed. Only C-Builder personality loaded. Running on Win11 22H2.

I tried today with the latest content from SVN repository. First compiled all packages for 32 bits platform and release build configuration. The compiler complain about units to be removed because present in a required package. I accepted to remove the units and all packages now compile fine. Then I changed platform for 64 bits and release build configuration. Built IcsCommonCB110Run.bpl: Success. Built IcsVclCB110Run.bpl: success. Built IcsFmxCB110Run.bpl: Success. Design time package must NOT be compiled as they are for the IDE and MUST be 32 bits as the IDE is a 32 bits application. You reported: Conclusion: Can't reproduce the issue.

You should mention where EXACTLY you get the AV. The debugger should tells you. Reproduce here the source lines around the AV.

ICS (Internet Component Suite) has two units which handle X509 certificates. OverbyteIcsSslX509Certs.pas and OverbyteIcsSslX509Utils.pas. They are somewhat an encapsulation of OpenSSL library and Windows Library. Although I'm ICS main author, I'm not the right person to explain the details. Maybe you should read this post in the support mailing list and start a new post if you have more questions. BTW: ICS is freeware. Look at https://wiki.overbyte.eu.

The way numbers are represented is platform dependent. I don't know any platform which use 56 bit for an integer (7 bytes you said). Usually you have 8, 16, 32 ou 64 bits integers (Byte, Short, Integer and Int64 in Delphi). Java code you present make me think that the 7 bytes in the TBytes has to be prefixed by a 8th byte to form a 8 byte (64 bit) integer. (decimal) 1.000.000.000 is (hex)3B 9A CA 00. I don't see thoses bytes in the TBytes you show. So the representation is not direct, whatever the byte order is. Maybe the number is encrypted or it is not 1.000.000.000 ?

TBytes is a kind of byte array. You say that the smartcard returns "30 82 05 ....". Do you mean the TBytes[0] containe ascii '3', TBytes[1] contains ascii '0', TBytes[2] contains ascii space and so on? OR Do you mean TBytes[0] contain $30, TBytes[1] containes $82 and so on. It would help if you correctly explain what you really get and what you printed out to show in your message. I would also help if you tell us the exact x509 certificate you need: .pem, .cer, .crt, .der or other file. I guess the smartcard return a .der (binary). Did you already read this resource : https://www.ssl.com/guide/pem-der-crt-and-cer-x-509-encodings-and-conversions/

I which type of variable to you get that data?

Correct!

That's normal. Each memory block is guarded by additional data to detect overrun and under-run. madExcept is not intended to be delivered with the released product. Pay attention that memory allocated with Delphi memory manager comes from virtual memory and is sub-allocated. In this sub-allocation, you get also fragmentation. Actual behavior is entirely dependent on the memory manager you use (You said FastMM4). If you app consume memory but has no leak, then you have fragmentation.

I don't know for Lenovo, Dell or HP, but for assembled desktop PC on demand, here in my country, the price here is much less than equivalent Apple computer.

That's right, but the number of installations is limited (I think it is 3). After that you have to contact Embarcadero to explain why you need more installations.

Not sure I understand at which state you have a problem. It is when you download or is it when you install ?

This probably means that there is no memory leak but memory fragmentation. You have 118MB memory split into thousands of block separated by small free blocks. In madExcept, you can check for either memory overrun or under-runs. It is detected instantly and triggers an exception. Just check the checkbox in madExcept settings. One of my first advice was you split the whole applications in small chunks, candidates are the threads. Run the code in another executable easier to debug and understand than the whole application. Divide to conquer!

This is required to do that because there may be cases when sizeof() is used to create an array of structures, array which could be written to disk or send to another program or context where the sizeof the structure is different. The dummy data at the end of the structure will never be used except for padding the structure to have the exact required size.