Vulnerability Development: Re: stackguard-like embedded protection

From: Crispin Cowan <crispin_at_WIREX.COM>
Date: Tue, 5 Sep 2000 15:56:12 -0700

"Bluefish (P.Magnusson)" wrote:

> Nothing is mentioned of formatation bugs, which is probably due to the
> fact that the document is dated June 19, 2000, alas the big public
> discussions on subject had just recently started.
>
> From what I remember from bugtraq, it seems to be quite tricky to provide
> a good patch to this problem. So I wonder, has any of these tools
> (ProPolice, libsafe, StackGuard or StackShield) added anything to
> combat formatation bugs, or if it's an active research area.

We are working on a robust solution to the format bug problem, but it is
months away from release.

Crispin

--
Crispin Cowan, Ph.D.
Chief Research Scientist, WireX Communications, Inc. http://wirex.com
Free Hardened Linux Distribution:                    http://immunix.org
                Olympics:  The Corruption Games

Received on Sep 06 2000