[lkml]   [1999]   [Dec]   [28]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
Messages in this thread
SubjectRe: Unexecutable stack
Steve VanDevender <> said:


> In theory it is possible to write executable code into a buffer
> in the data segment and overflow a buffer in the stack so that
> the stack frame contains a return address that points into that
> data. In practice it is much harder to create an exploit with
> this method as it requires quite detailed knowledge of the data
> segment layout.

Yep, it is somewhat harder, and thus not done regularly by crackers today,
as this is rarely needed now. If/when this becomes common, the cracks will
become common too. Then we are where we started. Better than buying (false)
security is to fix the affected programs.
Dr. Horst H. von Brand
Departamento de Informatica Fono: +56 32 654431
Universidad Tecnica Federico Santa Maria +56 32 654239
Casilla 110-V, Valparaiso, Chile Fax: +56 32 797513

To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to
Please read the FAQ at

 \ /
  Last update: 2005-03-22 13:55    [W:0.090 / U:3.784 seconds]
©2003-2018 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site