Bugtraq mailing list archives
Re: [ANNOUNCE] glibc heap protection patch
From: William Robertson <wkr () cs ucsb edu>
Date: Wed, 3 Dec 2003 11:33:56 -0800
On Dec 03, 2003, at 01:52, Eugene Tsyrklevich wrote:
indeed, it should
This has been patched to use /dev/urandom in v1.4, which also fixes a couple of other issues.
have you seen http://synflood.at/contrapolice/? your paper did not mentionthis.
We didn't find this when we did our related work search back during late spring, but Andreas contacted me after our announcement. From looking at the code, I don't think the goals are quite the same. We only try to protect the chunk headers, but it seems that he wants instead to protect data contained in the user-visible memory region. This would be nice, but I think this has its own set of issues.
any plans on porting this to OpenBSD (and saving me time :)?
I've started looking at it, but I don't think I'll have time to seriously evaluate the situation there for a week or two, so feel free. :-)
eugene
-- William Robertson Reliable Software Group, UC Santa Barbara http://www.cs.ucsb.edu/~wkr/
Current thread:
- [ANNOUNCE] glibc heap protection patch William Robertson (Dec 01)
- Re: [ANNOUNCE] glibc heap protection patch Stefan Esser (Dec 02)
- Re: [ANNOUNCE] glibc heap protection patch William Robertson (Dec 02)
- Re: [ANNOUNCE] glibc heap protection patch Stefan Esser (Dec 03)
- Re: [ANNOUNCE] glibc heap protection patch William Robertson (Dec 03)
- Re: [ANNOUNCE] glibc heap protection patch William Robertson (Dec 02)
- Re: [ANNOUNCE] glibc heap protection patch Stefan Esser (Dec 02)
- Re: [ANNOUNCE] glibc heap protection patch Eugene Tsyrklevich (Dec 02)
- Re: [ANNOUNCE] glibc heap protection patch William Robertson (Dec 02)
- Re: [ANNOUNCE] glibc heap protection patch Han Boetes (Dec 03)
- Re: [ANNOUNCE] glibc heap protection patch Adam Shostack (Dec 04)
- Re: [ANNOUNCE] glibc heap protection patch Jim Knoble (Dec 04)
- Re: [ANNOUNCE] glibc heap protection patch William Robertson (Dec 02)
- Message not available
- Re: [ANNOUNCE] glibc heap protection patch William Robertson (Dec 04)
- <Possible follow-ups>
- Re: [ANNOUNCE] glibc heap protection patch xenophi1e (Dec 03)
- Re: [ANNOUNCE] glibc heap protection patch Stefan Esser (Dec 04)
- Re: [ANNOUNCE] glibc heap protection patch Troed SĂ„ngberg (Dec 04)
- Re: [ANNOUNCE] glibc heap protection patch Stefan Esser (Dec 04)
- Re: [ANNOUNCE] glibc heap protection patch Marco Ivaldi (Dec 04)