Re: Future of buffer overflows ?

[David Wagner <daw () MOZART CS BERKELEY EDU>]

Bluefish (P.Magnusson) wrote:
> > You might want to think about how dynamic linking fits into this world.
> > (Hint: I think anytime you have dynamic linking, non-exec permissions
> > can be bypassed.)
>
> No, you're wrong. Perhaps todays implementations require it, but it is
> *not* a fundamental requirement for dynamic linking. Basicly you'd write
> the page/segment and then set it none-writeable.

Of course, you can't set it non-writeable until after you've linked in
the dynamic library, so you're assuming that the app is not compromised
until all dynamic libraries have been linked in.

But I take your point.  In practice, this seems like the common case.