From owner-freebsd-security  Thu Nov  8  1: 8:10 2001
Delivered-To: freebsd-security@freebsd.org
Received: from virginia.yamato.ibm.co.jp (virginia.yamato.ibm.co.jp [203.141.89.165])
	by hub.freebsd.org (Postfix) with ESMTP id 7AD3B37B417
	for <freebsd-security@freebsd.org>; Thu,  8 Nov 2001 01:08:03 -0800 (PST)
Received: from ns.trl.ibm.com (ns.trl.ibm.com [9.116.48.18])
	by virginia.yamato.ibm.co.jp (8.11.6/3.7W/GW3.3) with ESMTP id fA896j104750;
	Thu, 8 Nov 2001 18:06:45 +0900
Received: from localhost by ns.trl.ibm.com (AIX4.3/8.9.3/TRL4.5SRV)
	id SAA26528; Thu, 8 Nov 2001 18:06:44 +0900
To: kris@obsecurity.org
Cc: luc@2113.ch, freebsd-security@freebsd.org,
	kzaraska@student.uci.agh.edu.pl
Subject: Re: BUFFER OVERFLOW EXPLOITS
In-Reply-To: <20011029132504.A98067@xor.obsecurity.org>
References: <Pine.BSF.4.21.0110281500030.6086-100000@lhotse.zaraska.dhs.org>
	<3BDD11C8.4746A7BD@2113.ch>
	<20011029132504.A98067@xor.obsecurity.org>
X-Mailer: Mew version 1.94b48 on Emacs 20.7 / Mule 4.0 (HANANOEN)
Mime-Version: 1.0
Content-Type: Text/Plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Message-Id: <20011108180644Y.etoh@trl.ibm.com>
Date: Thu, 08 Nov 2001 18:06:44 +0900
From: Hiroaki Etoh <etoh@trl.ibm.co.jp>
X-Dispatcher: imput version 990813(IM119)
Lines: 16
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-security.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-security>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-security>
X-Loop: FreeBSD.org

At Mon, 29 Oct 2001 13:25:04 -0800,
 Kris Kennaway <kris@obsecurity.org> wrote:
> Because it can cause problems for certain things.  The main one I've
> found is XFree86, which will fail to run if you build it with
> -fstack-protector.  I think it's overriding CFLAGS in parts of the
> build, which means that certain things aren't being compiled with
> -fstack-protector and fail to link at runtime as a result.
> 
> I also found a spurious failure in another application which would
> cause it to hit the overflow trap even though nothing was apparently
> overflowing.

Could you send any bug report to me?
I'll fix the problem.

Hiroaki Etoh

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message