Re: OS stopping stack buffer overflow exploits

Ralf Baechle (ralf@uni-koblenz.de)
Mon, 5 Jun 2000 04:22:07 +0200


On Sun, Jun 04, 2000 at 10:03:37AM +0200, Ingo Oeser wrote:

> > Hrm... this could cause some problems for applications which use
> > self-modifying code (i.e. trampoline handlers, etc.)
>
> Could you please show a daily example of any *need* for
> trampolines? I mean code, which could only be implemented
> (efficiently) via trampolines.
>
> I never saw one generated by GCC and never wrote an explicit one
> by myself. So for what important piece of code we do need it and
> can't code it without trampolines?

void * foo(void)
{
void bar(void)
{
}

return bar;
}

Ralf

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.rutgers.edu
Please read the FAQ at http://www.tux.org/lkml/