Re: Non-executable stack

--u3/rZRmxL6MmkK24
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Sat, Oct 29, 2005 at 12:42:16PM +0000, db wrote:
> On Saturday 29 October 2005 12:36, you wrote:
> > The issue is not one of want, but one of practicality.  FreeBSD updates
> > to new versions of gcc relatively frequently, and having to update the
> > propolice patch with each update (or waiting for an update) would be
> > additional work.
> >
> > It appears that propolice has finally made its way into gcc 4.1, so
> > hopefully that will be ready for FreeBSD 7.
>=20
> I don't want a gcc fix via propolice, I want kernel support for this. So =
that=20
> if a program tries to execute code in the stack or heap it will crash.
>=20
> br
> db
> _______________________________________________
> freebsd-security@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-security
> To unsubscribe, send any mail to "freebsd-security-unsubscribe@freebsd.or=
g"
>=20

The thing you are refering to is W^X using the NXE register of the amd64
if I'm not mistaken, marking memory pages as writable or executable,
but not both. (The thing also works on i386 using an ugly hack).

--=20
People usually get what's coming to them ... unless it's been mailed.

--u3/rZRmxL6MmkK24
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (OpenBSD)

iD8DBQFDY3XngDLTDEgDPT0RAo8fAJ99XJ/DF1OxxWR/slYIPrpI/DuL+gCdELqI
JRiLhJPpfgVJ+PUWf8LDAgM=
=hoU6
-----END PGP SIGNATURE-----

--u3/rZRmxL6MmkK24--