Dailydave mailing list archives

Re: ASLR+DEP = no problem. :>

From: Michal Zalewski <lcamtuf () coredump cx>
Date: Fri, 5 Feb 2010 10:54:40 -0800

My first impression on seeing this (I'm still reading Dion's paper) was
that perhaps some sort of validator or IPS-like functionality in the
JIT, analyzing the input, could be effective, looking for malformations
and suspicious behavior.


I propose antivirus scanning.

With this problem solved, moving on to...

/mz
_______________________________________________
Dailydave mailing list
Dailydave () lists immunitysec com
http://lists.immunitysec.com/mailman/listinfo/dailydave

Current thread:

ASLR+DEP = no problem. :> dave (Feb 03)
- Re: ASLR+DEP = no problem. :> Thierry Zoller (Feb 04)
  - Re: ASLR+DEP = no problem. :> Moshe Ben Abu (Feb 04)
    - Re: ASLR+DEP = no problem. :> dave (Feb 04)
    - Re: ASLR+DEP = no problem. :> Matthew Wollenweber (Feb 04)
  - Message not available
    - Re: ASLR+DEP = no problem. :> Thierry Zoller (Feb 04)
    - Re: ASLR+DEP = no problem. :> Alexander Sotirov (Feb 04)
    - Re: ASLR+DEP = no problem. :> Nate Lawson (Feb 05)
    - Re: ASLR+DEP = no problem. :> Larry Seltzer (Feb 05)
    - Re: ASLR+DEP = no problem. :> Michal Zalewski (Feb 05)
    - Re: ASLR+DEP = no problem. :> Sergio 'shadown' Alvarez (Feb 04)
    - Re: ASLR+DEP = no problem. :> pageexec (Feb 04)
    - Re: ASLR+DEP = no problem. :> Berend-Jan Wever (Feb 05)