| |||||||||||||
|
| |||||||||||||
Hardening Linux against buffer overflowsHardening Linux against buffer overflowsPosted May 8, 2003 20:22 UTC (Thu) by iabervon (subscriber, #722)In reply to: Hardening Linux against buffer overflows by brouhaha Parent article: Hardening Linux against buffer overflows
Well, in this case it's a bit like saying, "Putting a lock on your front door won't prevent burglary, because you have an unlocked side door they'll use instead." The problem is that a stack buffer overflow can be exploited in a number of ways, and only the simplest requires an executable stack. On the other hand, the new patch prevents a number of other exploits by putting more of the program out of harm's way. So it's possible that Linus will like it better, assuming he can't come up with an attack which will still work on otherwise correct programs that have a buffer overflow.
(Log in to post comments)
|
|
||||||||||||