bugtraq - Re: Buffer overflow prevention

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <3F3ACAD7.9020303@immunix.com>
Date: Wed, 13 Aug 2003 16:33:43 -0700
From: Crispin Cowan <crispin@...unix.com>
To: dolan@...admin.unt.edu
Subject: Re: Buffer overflow prevention

Patrick Dolan wrote:

>There is a flag for the Gnu C/C++ compilers, -fstack-protector, that will 
>implement ProPolice stack protection.  It should prevent stack smashing 
>techniques.
>
That is not actually in the standard GCC; it is in a forked GCC that 
OpenBSD chooses to ship.

We (Immunix) are in the process of trying to make StackGuard (the 
original) meet all of the criteria required for acceptance into GCC. At 
the GCC Summit <http://www.gccsummit.org/2003/> in May, we presented a 
StackGuard talk 
<http://www.gccsummit.org/2003/view_abstract.php?talk=31> on that topic.

Crispin

-- 
Crispin Cowan, Ph.D.           http://immunix.com/~crispin/
Chief Scientist, Immunix       http://immunix.com
            http://www.immunix.com/shop/