Re: non-executable stack (via PT_GNU_STACK) not being enforced

2010-10-13 Thread Brchk05
./a.out does not segfault once you have compiled it with "-z noexecstack", then page permissions are not being enforced. -Original Message- From: Goswin von Brederlow To: Brchk05 Cc: debian-security@lists.debian.org Sent: Wed, Oct 13, 2010 4:46 am Subject: Re: non-executable

Re: non-executable stack (via PT_GNU_STACK) not being enforced

2010-10-10 Thread Brchk05
It's a 32-bit kernel and probably does not have PAE support enabled so I think the mystery has been solved. Thanks to everyone for your help. -Original Message- From: Kees Cook To: Brchk05 Cc: debian-security@lists.debian.org Sent: Sun, Oct 10, 2010 1:40 pm Subject: Re

Re: non-executable stack (via PT_GNU_STACK) not being enforced

2010-10-10 Thread Brchk05
: Re: non-executable stack (via PT_GNU_STACK) not being enforced --On Sunday, October 10, 2010 9:53 AM -0400 Brchk05 wrote: > > > > I am running Debian 2.6.26-21lenny4 and I am puzzled by an issue with the > enforcement of page permissions. I have written a simple program

Re: non-executable stack (via PT_GNU_STACK) not being enforced

2010-10-10 Thread Brchk05
Hi Wade, Thanks for your response. Shellcode is native machine code. It is not shell script code. See http://en.wikipedia.org/wiki/Shellcode -Original Message- From: Wade Richards To: Brchk05 Cc: debian-security@lists.debian.org Sent: Sun, Oct 10, 2010 11:59 am Subject: Re

Re: non-executable stack (via PT_GNU_STACK) not being enforced

2010-10-10 Thread Brchk05
support enforcement (or is that part Ubuntu specific). Does this sound plausible? -Original Message- From: Kees Cook To: Brchk05 Cc: debian-security@lists.debian.org Sent: Sun, Oct 10, 2010 12:07 pm Subject: Re: non-executable stack (via PT_GNU_STACK) not being enforced Hi, On Sun, Oct

non-executable stack (via PT_GNU_STACK) not being enforced

2010-10-10 Thread Brchk05
I am running Debian 2.6.26-21lenny4 and I am puzzled by an issue with the enforcement of page permissions. I have written a simple program with a basic buffer overflow and compiled two versions using gcc: one with -z execstack and another with -z noexecstack. So, to verify that the optio