Re: Smashing the Stack: prevention?

[tqbf () ENTERACT COM (Thomas H. Ptacek)]

> Not surprisingly, as a next-gen language, Perl already had this stuff
> built in.  Arrays and other data structures are dynamically scalable.
> And the "taint" dataflow checking (nothing *from* the outside world

There are fifty-five thousand lines of C code involved in the Perl
interpreter. Any privileged Perl program is executing the entirety of the
Perl interpreter as privileged code. I understand an appreciate Perl's
attention to security with "taint" checking and scaleable datatypes, but I
wouldn't trust a Perl program with an SUID bit for a heartbeat.

----------------
Thomas Ptacek at EnterAct, L.L.C., Chicago, IL [tqbf () enteract com]
----------------
"If you're so special, why aren't you dead?"