[lkml]   [2001]   [Aug]   [25]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
Messages in this thread
SubjectRe: [PATCH] this patch add a possibility to add a random offset to the stack on exec.
It would be much more productive to create some sort of stupid-code
detector so we can know where to fix things. For example, hacking gcc to
offer warnings on any reference to 'auto' storage by I/O or ASCIZ string
functions, similar to that warning that ld throws when you use gets().

( I know that the nonexecutable stack patch has been shot down many times
as a security measure, but it *would* be a decent stupid-code detector
when combined with an exploit attempt. Knowing that program X attempted
to aid and abet a burglar is better than expecting someone to comb through
every line of code on the 'net on the chance that holes will be found.
The burglars already do the latter, so why not put them to work detecting
bugs for us? :-} )

Mark H. Wood, Lead System Programmer mwood@IUPUI.Edu
Make a good day.

To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to
More majordomo info at
Please read the FAQ at

 \ /
  Last update: 2005-03-22 13:17    [W:0.046 / U:0.996 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site