Bugtraq mailing list archives
Re: Preventing exploitation with rebasing
From: Seth Breidbart <sethb () panix com>
Date: Wed, 5 Feb 2003 19:07:15 -0500 (EST)
In theory, it's easy to prove that some programs cannot be relocated, period. Anybody who has been programming long enough has seen people re-use a memory location as both an address and a constant in order to keep the program small enough (12k OK; 12k + 2 bytes really bad news). That can't be relocated. Even under the assumption that locations aren't re-used, it's provably impossible (Turing-complete) to determine whether the contents of a location can be used as an address by a program. That said, _if_ a program is relocatable, relocating it would seem to be an easy way to gain some security. Whether that's worth the cost (in fragility and undebuggability) is another question. Seth
Current thread:
- Re: Preventing exploitation with rebasing, (continued)
- Re: Preventing exploitation with rebasing David S Goldberg (Feb 05)
- Re: Preventing exploitation with rebasing Alun Jones (Feb 05)
- Re: Preventing exploitation with rebasing Deus, Attonbitus (Feb 06)
- RE: Preventing exploitation with rebasing Riley Hassell (Feb 05)
- Re: [VulnDiscuss] Preventing exploitation with rebasing Michal Zalewski (Feb 05)
- Re: Preventing exploitation with rebasing David Litchfield (Feb 05)
- Re: Preventing exploitation with rebasing Bugtraq User (Feb 05)
- Re: Preventing exploitation with rebasing D.C. van Moolenbroek (Feb 05)
- Re: Preventing exploitation with rebasing Michal Zalewski (Feb 05)
- Re: Preventing exploitation with rebasing Todd Sabin (Feb 05)
- Re: Preventing exploitation with rebasing Seth Breidbart (Feb 06)
- Re: Preventing exploitation with rebasing Richard Moore (Feb 06)
- Re: Preventing exploitation with rebasing Carolyn Meinel (Feb 07)
- Re: Preventing exploitation with rebasing Dave Aitel (Feb 05)
- Preventing exploitation with rebasing Fred Cohen (Feb 06)
- RE: Preventing exploitation with rebasing Jason Coombs (Feb 07)
- RE: Preventing exploitation with rebasing Ilya Dubinsky (Feb 07)