Re: safe strcpy()?

From: Crispin Cowan (crispin@wirex.com)
Date: 01/30/03

  • Next message: Dave Aitel: "Re: safe strcpy()?"
    Date: Thu, 30 Jan 2003 11:08:58 -0800
    From: Crispin Cowan <crispin@wirex.com>
    To: Dave Aitel <dave@immunitysec.com>
    
    
    

    Dave Aitel wrote:

    >Does anyone on this list have any connection with the GCC developers?
    >When is StackGuard and -blip going to get integrated into the standard
    >distribution?! What are we waiting on? Mono?
    >
    We are working towards that. Having a feature accepted into GCC requires
    some key things:

        * that the patch is current with GCC, which is a fast-moving target
        * that the patch is portable across architectures

    We are essentially current with GCC, in that we have an in-the-lab
    version of StackGuard/GCC 3.2. We are working on an IA64 port of
    StackGuard, so that we can credibly claim that StackGuard is portable by
    porting it.

    If anyone out there has particular expertise on some other CPU, and
    wants to help, we'll take it.

    When we get all that done, there's the small matter of persuading the
    GCC core maintainers to accept StackGuard, because they don't have to if
    they don't want to.

    Crispin

    -- 
    Crispin Cowan, Ph.D.
    Chief Scientist, WireX                      http://wirex.com/~crispin/
    Security Hardened Linux Distribution:       http://immunix.org
    Available for purchase: http://wirex.com/Products/Immunix/purchase.html
    			    Just say ".Nyet"
    
    




    Relevant Pages

    • Re: safe strcpy()?
      ... What about Propolice - according to a recent mail from the OpenBSD ... folks, Propolice is portable, and slightly better than StackGuard. ... Not that RedHat really cares what the GCC people say, ... > Crispin Cowan, Ph.D. ...
      (SecProg)
    • Re: Buffer overflow prevention
      ... >implement ProPolice stack protection. ... That is not actually in the standard GCC; it is in a forked GCC that ... We are in the process of trying to make StackGuard (the ... Chief Scientist, Immunix ...
      (Bugtraq)