lkml.org 
[lkml]   [1998]   [Aug]   [7]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
Date
From
SubjectRe: Compiler alternatives to no-exec (was Re: non exec stack...)
At 06:20 AM 8/7/98 GMT, Linus Torvalds wrote:
>In article <y7rogtxzkdr.fsf@sytry.doc.ic.ac.uk>,
>
>Zero also happens to be very cheap to test against. Total overhead: four
>instructions per function
>
>+ pushl $0
> ...
>+ popl %ecx
>+ testl %ecx,%ecx
>+ jne abort
> ret
>

This is probably not sufficient for all cases. You have to put 2 zero
guard bytes around the return address to be more secure. Overwriting the
returnadress can be done from two directions in theory.

Cheers,

René



-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.rutgers.edu
Please read the FAQ at http://www.altern.org/andrebalsa/doc/lkml-faq.html

\
 
 \ /
  Last update: 2005-03-22 13:43    [W:0.054 / U:0.428 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site