Date: Wed, 3 Nov 1999 11:30:04 -0500 (EST) From: Barrett Richardson <barrett@phoenix.aye.net> To: David G Andersen <danderse@cs.utah.edu> Cc: Andre Gironda <andre@sun4c.net>, frank@hellbell.agava.ru, freebsd-security@FreeBSD.ORG Subject: Re: stack protecting Message-ID: <Pine.BSF.4.01.9911031126120.25628-100000@phoenix.aye.net> In-Reply-To: <199911031358.GAA22340@faith.cs.utah.edu>
next in thread | previous in thread | raw e-mail | index | archive | help
On Wed, 3 Nov 1999, David G Andersen wrote: > Lo and behold, Andre Gironda once said: > > > > > > Stack protection doesn't work as there are still heap overflows and > > race conditions. it's best to apply TPE patches (Phrack, Issue 52/54), > > like originally implemented on upt.org. Or write perfect code ;> > > While I agree with you that it's not a perfect solution, isn't that > like saying that using a car alarm isn't a good idea, even though it will > prevent 50% of the breakins to your car? > > Defense in depth *is* a good idea. Stackguard and like products can > help quite a bit with this. > > Now, given that, Stackguard doesn't support FreeBSD. :) > > -Dave > Takes some minor twiddleing. What it upt.org? It doesn't resolve. - Barrett To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.4.01.9911031126120.25628-100000>