Date: Sat, 29 Oct 2005 15:15:19 +0200 From: Jimmy Scott <jimmy@inet-solutions.be> To: db <db@traceroute.dk> Cc: freebsd-security@freebsd.org Subject: Re: Non-executable stack Message-ID: <20051029131519.GA22254@ada.devbox.be> In-Reply-To: <200510291242.16461.db@traceroute.dk> References: <200510270608.51571.db@traceroute.dk> <200510271511.36004.db@traceroute.dk> <20051029073411.F11965@odysseus.silby.com> <200510291242.16461.db@traceroute.dk>
next in thread | previous in thread | raw e-mail | index | archive | help
--u3/rZRmxL6MmkK24 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Sat, Oct 29, 2005 at 12:42:16PM +0000, db wrote: > On Saturday 29 October 2005 12:36, you wrote: > > The issue is not one of want, but one of practicality. FreeBSD updates > > to new versions of gcc relatively frequently, and having to update the > > propolice patch with each update (or waiting for an update) would be > > additional work. > > > > It appears that propolice has finally made its way into gcc 4.1, so > > hopefully that will be ready for FreeBSD 7. >=20 > I don't want a gcc fix via propolice, I want kernel support for this. So = that=20 > if a program tries to execute code in the stack or heap it will crash. >=20 > br > db > _______________________________________________ > freebsd-security@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-security > To unsubscribe, send any mail to "freebsd-security-unsubscribe@freebsd.or= g" >=20 The thing you are refering to is W^X using the NXE register of the amd64 if I'm not mistaken, marking memory pages as writable or executable, but not both. (The thing also works on i386 using an ugly hack). --=20 People usually get what's coming to them ... unless it's been mailed. --u3/rZRmxL6MmkK24 Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.1 (OpenBSD) iD8DBQFDY3XngDLTDEgDPT0RAo8fAJ99XJ/DF1OxxWR/slYIPrpI/DuL+gCdELqI JRiLhJPpfgVJ+PUWf8LDAgM= =hoU6 -----END PGP SIGNATURE----- --u3/rZRmxL6MmkK24--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20051029131519.GA22254>