Hi, On Sun, Oct 10, 2010 at 09:53:40AM -0400, Brchk05 wrote: > However, I am able to inject and execute shellcode from a stack local > character buffer in both versions. Is there another system option I am > unaware of that affects enforcement? Is enforcement not supported for my > system version?
Your CPU may not support NX enforcement. Check your dmesg output, and your cpuflags line in /proc/cpuinfo for "nx". See https://wiki.ubuntu.com/Security/Features#nx though ignore the nx-emu notes, as that's not in Debian. -Kees -- Kees Cook @debian.org -- To UNSUBSCRIBE, email to debian-security-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/20101010160723.gh4...@outflux.net
