Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 19 Jul 1998 18:02:04 -0700 (PDT)
From:      Archie Cobbs <archie@whistle.com>
To:        brett@lariat.org (Brett Glass)
Cc:        security@FreeBSD.ORG
Subject:   Re: The 99,999-bug question: Why can you execute from the stack?
Message-ID:  <199807200102.SAA07953@bubba.whistle.com>
In-Reply-To: <199807192047.OAA02264@lariat.lariat.org> from Brett Glass at "Jul 19, 98 02:47:25 pm"

next in thread | previous in thread | raw e-mail | index | archive | help
Brett Glass writes:
> What I CAN'T understand is why FreeBSD allows the hack to occur. Why on
> Earth would one want to allow code to be executed from the stack? The Intel

As an almost-example of why executing on the stack is not completely
crazy, consider JIT-compiling Java runtimes like kaffe. These dynamically
compile Java methods into i386 executable instructions, then execute
those methods. Kaffe actually does this on the heap I think, but it just
as reasonable if it wanted to do it on the stack (eg, perhaps some kind
of temporary method, trampoline code to get things going, etc).

-Archie

___________________________________________________________________________
Archie Cobbs   *   Whistle Communications, Inc.  *   http://www.whistle.com

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe security" in the body of the message



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199807200102.SAA07953>