oss-sec mailing list archives

Re: Qualys Security Advisory - The Stack Clash


From: Agostino Sarubbo <ago () gentoo org>
Date: Wed, 21 Jun 2017 12:46:28 +0200

On Monday 19 June 2017 08:28:43 Qualys Security Advisory wrote:
III. Solutions
- Recompile all userland code (ld.so, libraries, binaries) with GCC's
  "-fstack-check" option, which prevents the stack-pointer from moving
  into another memory region without accessing the stack guard-page (it
  writes one word to every 4KB page allocated on the stack).

For the record, Gentoo Hardened enables by default -fstack-check=specific

-- 
Agostino Sarubbo
Gentoo Linux Developer


Current thread: