Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 21 Jul 1998 12:48:03 -0600
From:      Brett Glass <brett@lariat.org>
To:        Niall Smart <nialls@euristix.ie>
Cc:        security@FreeBSD.ORG
Subject:   Re: The 99,999-bug question: Why can you execute from the  stack?
Message-ID:  <199807211848.MAA14756@lariat.lariat.org>
In-Reply-To: <98Jul21.093736bst.19713@gateway.euristix.ie>
References:  <199807200148.TAA07794@harmony.village.org> <199807200102.SAA07953@bubba.whistle.com> <199807200148.TAA07794@harmony.village.org> <199807201714.LAA19993@lariat.lariat.org>

next in thread | previous in thread | raw e-mail | index | archive | help
At 10:39 AM 7/21/98 +0100, Niall Smart wrote:
 
>Eh?  Call gates are entry points to different priviledge levels.  I
>don't
>see how you intend to use them to stop the problem of the buffer
>overflow.

Call gates don't necessarily do ring transitions. They DO make sure you
can't jump into the middle of a routine.

They're not intended to stop buffer overflow, but to prevent an even
more subtle hack.

--Brett



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe security" in the body of the message



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199807211848.MAA14756>