Re: Obtuse smtpd

> PROBLEM!
...
> How do you detect one type of stack overwrite but not the other? [I
> guess I'll go read the Web page, too.] If you protect only the stack
> frame info, that takes a lot of registers - one set for each stack
> frame, with no defined maximum. If you protect the whole stack, you
> can't use data on it as read-write data.

I went and read it.

Apparently, they only protect the return address in the most recent
stack frame. This still allows for problems ... especially if I
overrun a buffer that was passed as an argument, or is otherwise
available from a previous stack frame.

--
Joe Yao				jsdy_at_cospo.osis.gov - Joseph S. D. Yao
COSPO Computer Support						EMT-A/B
-----------------------------------------------------------------------
This message is not an official statement of COSPO policies.