Re: OS stopping stack buffer overflow exploits

From: yoann@mandrakesoft.com
Date: Sun Jun 04 2000 - 09:10:07 EST


"Peter T. Breuer" <ptb@it.uc3m.es> writes:

> "A month of sundays ago Florian Weimer wrote:"
> > The C and C++ frontends only generate trampolines if you use a GNU
> > extension (nested functions).
>
> And I have no idea why they should want to: nesting is purely a
> question of namespaces and syntactic scoping. It should impact
> the implementation semantics not at all.
>

GCC use lexical scoping for nested function, lexical scoping use
trampolines... so it will break...

please refer to the gcc documentation.

[snip]
 GNU CC implements taking the address of a nested function using a
technique called "trampolines". A paper describing them is available
as `http://master.debian.org/~karlheg/Usenix88-lexic.pdf'
[snip]

-- 
		-- Yoann http://www.mandrakesoft.com/~yoann/
 It is well known that M$ product don't make a free() after a malloc(),
the unix community wish them good luck for their future developement.

- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.rutgers.edu Please read the FAQ at http://www.tux.org/lkml/



This archive was generated by hypermail 2b29 : Wed Jun 07 2000 - 21:00:18 EST