oss-sec mailing list archives

Re: Re: strings / libbfd crasher


From: Jann Horn <jann () thejh net>
Date: Mon, 3 Nov 2014 02:23:17 +0100

On Sun, Nov 02, 2014 at 04:57:23PM -0800, Michal Zalewski wrote:
Call stack exhaustion is generally non-exploitable
in itself.

It can be exploitable in multithreaded programs though if there is
an unused stack allocation of at least one page further down in the
stack.

Attachment: signature.asc
Description: Digital signature


Current thread: