[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: PointGuard: It's not the Size of the Buffer, it's the Addressof the Pointer

To: Nicholas Weaver <nweaver@CS.berkeley.edu>
Subject: Re: PointGuard: It's not the Size of the Buffer, it's the Addressof the Pointer
From: Crispin Cowan <crispin@immunix.com>
Date: Fri, 15 Aug 2003 13:02:12 -0700

Nicholas Weaver wrote:

>The most likely bypass will be when a program also has a "print a
>pointer" bug/feature.  
>
That's true, but unintended "print a pointer" bugs become much more 
scarce when composed with FormatGuard <http://immunix.org/formatguard.html>.

Crispin

-- 
Crispin Cowan, Ph.D.           http://immunix.com/~crispin/
Chief Scientist, Immunix       http://immunix.com
            http://www.immunix.com/shop/

References:
- PointGuard: It's not the Size of the Buffer, it's the Address ofthe Pointer
  - From: Crispin Cowan <crispin@immunix.com>
- Re: PointGuard: It's not the Size of the Buffer, it's the Addressof the Pointer
  - From: Florian Weimer <fw@deneb.enyo.de>
- Re: PointGuard: It's not the Size of the Buffer, it's the Addressof the Pointer
  - From: Crispin Cowan <crispin@immunix.com>

Prev by Date: Re: CNN: 'Explores Possibility that Power Outage is Related to Internet Worm'
Next by Date: Re: Need help. Proof of concept 100% security.
Prev by thread: Re: PointGuard: It's not the Size of the Buffer, it's the Addressof the Pointer
Next by thread: Recoding msblast.exe in C from disassembly
Index(es):
- Date
- Thread