Bugtraq mailing list archives
Re: Buffer overflow prevention
From: noir <noir () gsu linux org tr>
Date: Fri, 15 Aug 2003 01:01:08 +0300 (EEST)
I believe that Mr. Raadt meant PAX by W^X. We all enjoy ascii art but I wanted to note that renaming somebody elses work is not so ethical. so for the real thing please consider checking: http://pageexec.virtualave.net/ my linux box have 0 remotely exploitable vulnerabilities in its default install since the begining of time and space. thanks to segmentation, ASLR from the PAX project. Thanks, - noir -----Original Message----- From: Theo de Raadt [mailto:deraadt () cvs openbsd org] Sent: Thursday, August 14, 2003 12:37 PM To: Mariusz Woloszyn Subject: Re: Buffer overflow prevention
I believe the best protection (at this time) is to combine ProPolice with a W^X technology.
Current thread:
- Re: Buffer overflow prevention, (continued)
- Re: Buffer overflow prevention Shaun Clowes (Aug 18)
- Re: Buffer overflow prevention Crispin Cowan (Aug 18)
- Re: Buffer overflow prevention Mark Handley (Aug 18)
- Re: Buffer overflow prevention Crispin Cowan (Aug 18)
- Heterogeneity as a form of obscurity, and its usefulness Bob Rogers (Aug 22)
- Re: Heterogeneity as a form of obscurity, and its usefulness Crispin Cowan (Aug 22)
- Re: Heterogeneity as a form of obscurity, and its usefulness Nicholas Weaver (Aug 22)
- Re: Buffer overflow prevention Patrick Dolan (Aug 14)
- Re: Buffer overflow prevention Theo de Raadt (Aug 18)
- Re: Buffer overflow prevention Peter Busser (Aug 18)
- Re: Buffer overflow prevention noir (Aug 18)
- Re: Buffer overflow prevention Mariusz Woloszyn (Aug 18)