Re: CVE Request coreutils

[Florian Weimer <fweimer () redhat com>]

On 01/22/2013 04:47 PM, Vincent Danen wrote:

> Do you believe this would be the case with modern GCC/Glibc hardening
> though?  Wouldn't this just be rendered a crash?

Catching this reliably needs compiling with -fstack-check, which is 
currently not among commonly used hardening flags.  The generated code 
used to be rather buggy, too.

--
Florian Weimer / Red Hat Product Security Team