[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[Full-disclosure] glibc and alloca()

To: full-disclosure <full-disclosure@xxxxxxxxxxxxxxxxx>
Subject: [Full-disclosure] glibc and alloca()
From: Chris Evans <scarybeasts@xxxxxxxxx>
Date: Thu, 24 Feb 2011 19:25:34 -0800

Hi,

Here's some details on glibc alloca()-based memory corruption that Cris
Neckar and I unearthed whilst looking into a Chromium bug last year:

http://scarybeastsecurity.blogspot.com/2011/02/i-got-accidental-code-execution-via.html


Cheers
Chris

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Follow-Ups:
- Re: [Full-disclosure] glibc and alloca()
  - From: Maksymilian Arciemowicz

Prev by Date: Re: [Full-disclosure] Why should the presence of shebang (#!) freak out ANY security conscious guy?
Next by Date: [Full-disclosure] CA20110223-01: Security Notice for CA Host-Based Intrusion Prevention System
Previous by thread: Re: [Full-disclosure] Why should the presence of shebang (#!) freak out ANY security conscious guy?
Next by thread: Re: [Full-disclosure] glibc and alloca()
Index(es):
- Date
- Thread