Vulnerability Development mailing list archives

Re: stackguard-like embedded protection


From: Crispin Cowan <crispin () WIREX COM>
Date: Tue, 5 Sep 2000 15:56:12 -0700

"Bluefish (P.Magnusson)" wrote:

Nothing is mentioned of formatation bugs, which is probably due to the
fact that the document is dated June 19, 2000, alas the big public
discussions on subject had just recently started.

From what I remember from bugtraq, it seems to be quite tricky to provide
a good patch to this problem. So I wonder, has any of these tools
(ProPolice, libsafe, StackGuard or StackShield) added anything to
combat formatation bugs, or if it's an active research area.

We are working on a robust solution to the format bug problem, but it is
months away from release.

Crispin

--
Crispin Cowan, Ph.D.
Chief Research Scientist, WireX Communications, Inc. http://wirex.com
Free Hardened Linux Distribution:                    http://immunix.org
                Olympics:  The Corruption Games


Current thread: