| |||||||||||||
|
| |||||||||||||
"Exec Shield" for Linux: Linus is right"Exec Shield" for Linux: Linus is rightPosted May 4, 2003 22:19 UTC (Sun) by JoeBuck (subscriber, #2330)In reply to: "Exec Shield" for Linux: Linus is right by john54 Parent article: "Exec Shield" for Linux
There have been bugs in image decoding libraries (PNG, JPEG) in which deliberately corrupt data causes a buffer overflow. In this case, the overflow data may contain NUL characters, so the ASCII armor trick will not work. You're also forgetting about locales that specify non-8-bit character sets. However, you are correct that tactics that just provide a long ASCII string to cause the overflow will not work.
(Log in to post comments)
|
|
||||||||||||