lkml.org 
[lkml]   [1997]   [Jun]   [5]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
From
SubjectRe: Non-Executable Stack Patch
Date
> > The biggest problem we have left securitywise is probably /tmp file anyway
> > especially from GNU tools
> In that the GNU tools use /tmp more than vendor "x" tools, or that GNU
> tools are more aware (and hense avoid) stack overflow problems (not that
> either is more or less secure ;) ?

The GNU coding standard (which most GNU tools follow fairly well) is very
explicit about handling arbitary length data and having no limits. As a result
they tend to alloca() the right amounts on the whole rather than use buffers.

A lot of stuff uses /tmp without due care and attention.

\
 
 \ /
  Last update: 2005-03-22 13:39    [W:0.034 / U:0.364 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site