Re: Stack growth direction to thwart buffer overflow attacks

From: Rupert Pigott (roo_at_dark-try-removing-this-boong.demon.co.uk)
Date: 08/21/03

  • Next message: Owen T. Stevens: "Re: HP-UX openssh configuration problem" 
    Date: Thu, 21 Aug 2003 22:24:53 +0100

    <phn@icke-reklam.ipsec.nu> wrote in message
    news:bhtls5$2330$1@nyheter.ipsec.se...
    > In comp.security.misc Frank Cusack <fcusack@fcusack.com> wrote:

    [SNIP]

    > > ANSI/ISO is becoming more and more important.
    > The ought to be more importent, but sometimes they will obsolet themselfs

    I'm curious : Did you try porting C code before C89, or even
    porting C code written before C89 ? Who decides what's standard
    and what isn't ? Who decides how code should behave ? The
    vendors would argue : Our compiler is right, you are wrong ! :)

    What I'm trying to say is : standards are important because they
    provide a baseline for comparison and compliance, if nothing
    else.

    If you've ever tried porting some C written many years ago for
    some specific compiler (there were lots of C compiler vendors
    once upon a time) then you'll know what I'm driving at. It has
    occurred to me that perhaps free software renders this line
    of reasoning invalid. I don't think so, if I'm building some
    bit of code that was written for GCC 1.5.x targetted for a
    DSP56K I *really* want to know what that compiler was gonna
    do with it... Without the guide of the standard I'm pretty
    much shooting blind. :/

    Cheers,
    Rupert

  • Next message: Owen T. Stevens: "Re: HP-UX openssh configuration problem"

    Relevant Pages

    • Re: C portability is a myth
      ... portability has to do with availability, ... I am not convinced yet that it isn't a compiler bug (I saw ... >> was the C standard itself which was the culprit in causing the ... Porting requires effort regardless of whether or not I have conformed ...
      (comp.lang.c)
    • Re: Whats the deal with C99?
      ... Compiler vendors aren't in the business of conforming to standards, ... If, as you say, most of the C programming community had a standard ... Your account seems to imply that vendors demanded these new features, ...
      (comp.lang.c)
    • Re: Whats the deal with C99?
      ... Compiler vendors aren't in the business of conforming to standards, ... most of their user base was pleased, why was there another standard at ... Your account seems to imply that vendors demanded these new features, ...
      (comp.lang.c)
    • Re: Stack growth direction to thwart buffer overflow attacks
      ... Did you try porting C code before C89, ... some specific compiler (there were lots of C compiler vendors ... Without the guide of the standard I'm pretty ...
      (comp.security.misc)
    • Re: Teaching new tricks to an old dog (C++ -->Ada)
      ... There is a standard and there are ... - compiler vendors wanting to be backwards compatible. ... "extensions" to the language. ...
      (comp.lang.ada)