Non-executable stack

[Jimmy Scott]

On Sat, Oct 29, 2005 at 12:42:16PM +0000, db wrote:
> On Saturday 29 October 2005 12:36, you wrote:
> > The issue is not one of want, but one of practicality.  FreeBSD updates
> > to new versions of gcc relatively frequently, and having to update the
> > propolice patch with each update (or waiting for an update) would be
> > additional work.
> >
> > It appears that propolice has finally made its way into gcc 4.1, so
> > hopefully that will be ready for FreeBSD 7.
> 
> I don't want a gcc fix via propolice, I want kernel support for this. So that 
> if a program tries to execute code in the stack or heap it will crash.
> 
> br
> db
> _______________________________________________
> freebsd-security at freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-security
> To unsubscribe, send any mail to "freebsd-security-unsubscribe at freebsd.org"
> 

The thing you are refering to is W^X using the NXE register of the amd64
if I'm not mistaken, marking memory pages as writable or executable,
but not both. (The thing also works on i386 using an ugly hack).

-- 
People usually get what's coming to them ... unless it's been mailed.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 187 bytes
Desc: not available
Url : http://lists.freebsd.org/pipermail/freebsd-security/attachments/20051029/f99696b9/attachment.bin