RE: Buffer overflow prevention

From: Avery Buffington (avery.buffingtonat_private)
Date: Thu Aug 14 2003 - 15:31:49 PDT

Next message: James Davis: "Linux-sec-uk mailing list"

Previous message: Jane Smith: "Re: wu-ftpd fb_realpath() off-by-one bug"
Maybe in reply to: Eygene A. Ryabinkin: "Buffer overflow prevention"
Next in thread: Matt D. Harris: "Re: Buffer overflow prevention"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

no, he ment W^X ("W xor X") but I'm not about to go into a comparison of the two or their pros and cons. 

second bullet of http://www.openbsd.org/33.html#new will explain W^X but http://archives.neohapsis.com/archives/openbsd/2003-04/1678.html will make you chuckle

-----Original Message-----
From: noir [mailto:noirat_private]
Sent: Thursday, August 14, 2003 5:01 PM
To: bugtraqat_private
Subject: Re: Buffer overflow prevention 

I believe that Mr. Raadt meant PAX by W^X. 
We all enjoy ascii art but I wanted to note that renaming somebody 
elses work is not so ethical.

Next message: James Davis: "Linux-sec-uk mailing list"
Previous message: Jane Smith: "Re: wu-ftpd fb_realpath() off-by-one bug"
Maybe in reply to: Eygene A. Ryabinkin: "Buffer overflow prevention"
Next in thread: Matt D. Harris: "Re: Buffer overflow prevention"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Fri Aug 15 2003 - 10:53:04 PDT