bugtraq - [ANNOUNCE] glibc heap protection patch

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Date: Mon, 1 Dec 2003 11:31:03 -0800
From: William Robertson <wkr@...ucsb.edu>
To: sectools@...urityfocus.com, bugtraq@...urityfocus.com,
	focus-ids@...urityfocus.com
Subject: [ANNOUNCE] glibc heap protection patch

Hi all,

I'd just like to announce that we have a heap protection system for 
glibc available for download. The system detects and prevents all heap 
overflow exploits that modify inline control information from 
succeeding against a protected application, can be installed 
system-wide or on a per-process basis using LD_PRELOAD, and is 
transparent to existing applications.

We would definitely appreciate any feedback and bug reports on the 
code. The patch and some additional information is available at:

http://www.cs.ucsb.edu/~wkr/projects/heap_protection/

Enjoy!

--
William Robertson
Reliable Software Group, UC Santa Barbara
http://www.cs.ucsb.edu/~wkr/