meet Immunix, a version of Red Had Linux compiled with a special anti-stack-smashing, anti-format-bug
compiler.
The site has excellent info on smashing the stack, format bugs and unix in general.
Immunix is decended from a DARPA unix distribution.... DARPA as in ARPAnet.. the forerunner of the
internet.
a gem from one of their more obscure pages:
The solution was to create a variant of the StackGuard
just for it, called "lite", which doesn't provide a
__canary_death_handler. Some effort was required to
get GLIBC to define its own version of this procedure,
which among other things, required the symbol to be
declared with a "weak" attribute, since its single
declaration was used more than once. Its not clear the
gcc supplied one in libgcc2.a is in PIC either. Its might
be possible to go back and fix the gcc supplied version
so that it was PIC and weak, which might fix the GLIBC
build.
cheers :)
Stuart
generated by msg2page 0.06 on Jul 21, 2006 at 19:04:41
search: