On Sat, Oct 29, 2005 at 12:42:16PM +0000, db wrote: > On Saturday 29 October 2005 12:36, you wrote: > > The issue is not one of want, but one of practicality. FreeBSD updates > > to new versions of gcc relatively frequently, and having to update the > > propolice patch with each update (or waiting for an update) would be > > additional work. > > > > It appears that propolice has finally made its way into gcc 4.1, so > > hopefully that will be ready for FreeBSD 7. > > I don't want a gcc fix via propolice, I want kernel support for this. So that > if a program tries to execute code in the stack or heap it will crash. > > br > db > _______________________________________________ > freebsd-security@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-security > To unsubscribe, send any mail to "[EMAIL PROTECTED]" >
The thing you are refering to is W^X using the NXE register of the amd64 if I'm not mistaken, marking memory pages as writable or executable, but not both. (The thing also works on i386 using an ugly hack). -- People usually get what's coming to them ... unless it's been mailed.
pgpWsc53CiC9e.pgp
Description: PGP signature
