Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 15 Aug 2004 08:44:02 +0900
From:      horio shoichi <bugsgrief@bugsgrief.net>
To:        Siddhartha Jain <sid@netmagicsolutions.com>
Cc:        freebsd-questions@freebsd.org
Subject:   Re: propolice patch on 4.10
Message-ID:  <20040814.234402.3a8fde0951d524e9.10.0.3.20@bugsgrief.net>
In-Reply-To: <411E082F.4020600@netmagicsolutions.com>
References:  <411E082F.4020600@netmagicsolutions.com>

next in thread | previous in thread | raw e-mail | index | archive | help
On Sat, 14 Aug 2004 18:10:15 +0530
Siddhartha Jain <sid@netmagicsolutions.com> wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> 
> Hello,
> 
> I wanted the propolice protection for my 4.10 FreeBSD install. So I
> downloaded the latest available propolice patch (for 4.8) and patched
> the source (seemed to go ok). Now after going thru the entire rebuild
> process, how do I verify that the propolice thing is active and fine?
> 
> 
> thanks,
> 
> Siddhartha
> 
> 
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.2.1 (MingW32)
> Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org
> 
> iD8DBQFBHgguOGaxOP7knVwRAs5DAJ428pXMgtLhqdPWdQIG7jp3FyaAFwCfTV0L
> TjWCWx5GeRDAZGBuDLBbQFk=
> =xoKI
> -----END PGP SIGNATURE-----
> _______________________________________________
> freebsd-questions@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to "freebsd-questions-unsubscribe@freebsd.org"
> 

Following code (and the instruction) has been snatched from somewhere
discussing Solaris propolice. If you need the credibility, or better
solution please search them yourself.

% cat test-propolice.c
/* test-propolice.c */

#define OVERFLOW "This is longer than 10 bytes"

int main (int argc, char *argv[])
{ char buffer[10]; strcpy(buffer, OVERFLOW); return 0;
} 
% cc test-propolice.c
% ./a.out
Abort (core dumped)
% tail -2 /var/log/messages
Aug 15 08:15:48 hydra a.out: stack overflow in function main
Aug 15 08:15:48 hydra /kernel: pid 75040 (a.out), uid 100: exited on signal 6 (core dumped)
% cc -fno-stack-protector test-propolice.c
% ./a.out
Segmentation fault (core dumped)
% tail -3 /var/log/messages
Aug 15 08:15:48 hydra a.out: stack overflow in function main
Aug 15 08:15:48 hydra /kernel: pid 75040 (a.out), uid 100: exited on signal 6 (core dumped)
Aug 15 08:19:05 hydra /kernel: pid 75051 (a.out), uid 100: exited on signal 11 (core dumped)
%

Above test is done on 4.9-STABLE.

Note the propolice produced messages:

o "Abort" on terminal, and
o "stack overflow" in log file.




horio shoichi



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20040814.234402.3a8fde0951d524e9.10.0.3.20>