Re: Stack-smashing protection

2002-12-10 Thread Gustavo Franco
On Fri, 2002-12-06 at 18:29, Albert Cervera Areny wrote: > I've read in slashdot > (http://bsd.slashdot.org/article.pl?sid=02/12/02/2035207) that openbsd has > included stack-smashing protection using the ProPolice > (http://www.trl.ibm.com/projects/security/ssp/) patch for GCC

Re: Stack-smashing protection

2002-12-10 Thread Gustavo Franco
On Fri, 2002-12-06 at 18:29, Albert Cervera Areny wrote: > I've read in slashdot > (http://bsd.slashdot.org/article.pl?sid=02/12/02/2035207) that openbsd has > included stack-smashing protection using the ProPolice > (http://www.trl.ibm.com/projects/security/ssp/) patch for GCC

Re: Stack-smashing protection

2002-12-09 Thread Alvin Oga
On Mon, 9 Dec 2002, martin f krafft wrote: > also sprach Albert Cervera Areny <[EMAIL PROTECTED]> [2002.12.06.2129 +0100]: > > I think it would be a great idea to use this patch with debian too as soon > > as > > gcc becomes the compiler by default. Protecting the entire system from this > >

Re: Stack-smashing protection

2002-12-09 Thread martin f krafft
also sprach Albert Cervera Areny <[EMAIL PROTECTED]> [2002.12.06.2129 +0100]: > I think it would be a great idea to use this patch with debian too as soon as > gcc becomes the compiler by default. Protecting the entire system from this > kind of bugs would really be a great security step forward.

Re: Stack-smashing protection

2002-12-09 Thread Alvin Oga
On Mon, 9 Dec 2002, martin f krafft wrote: > also sprach Albert Cervera Areny <[EMAIL PROTECTED]> [2002.12.06.2129 +0100]: > > I think it would be a great idea to use this patch with debian too as soon as > > gcc becomes the compiler by default. Protecting the entire system from this > > kind

Re: Stack-smashing protection

2002-12-09 Thread martin f krafft
also sprach Albert Cervera Areny <[EMAIL PROTECTED]> [2002.12.06.2129 +0100]: > I think it would be a great idea to use this patch with debian too as soon as > gcc becomes the compiler by default. Protecting the entire system from this > kind of bugs would really be a great security step forward.

Re: Stack-smashing protection

2002-12-07 Thread Albert Cervera Areny
A Saturday 07 December 2002 2:37, David B Harris va escriure: > On Sat, 7 Dec 2002 01:09:59 +0100 > > Albert Cervera Areny <[EMAIL PROTECTED]> wrote: > > So it isn't really that the hole system runs 8% slower. Sorry for my > > first explanation... Now I think it is an overhead which is afordable >

Re: Stack-smashing protection

2002-12-07 Thread Albert Cervera Areny
A Saturday 07 December 2002 2:37, David B Harris va escriure: > On Sat, 7 Dec 2002 01:09:59 +0100 > > Albert Cervera Areny <[EMAIL PROTECTED]> wrote: > > So it isn't really that the hole system runs 8% slower. Sorry for my > > first explanation... Now I think it is an overhead which is afordable >

Re: Stack-smashing protection

2002-12-06 Thread David B Harris
On Sat, 7 Dec 2002 01:09:59 +0100 Albert Cervera Areny <[EMAIL PROTECTED]> wrote: > So it isn't really that the hole system runs 8% slower. Sorry for my > first explanation... Now I think it is an overhead which is afordable > seeing its benefits. For your purposes, anyways. As has been said, thi

Re: Stack-smashing protection

2002-12-06 Thread Albert Cervera Areny
s. > > regards > > Thing > > On Sat, 07 Dec 2002 09:29, Albert Cervera Areny wrote: > > I've read in slashdot > > (http://bsd.slashdot.org/article.pl?sid=02/12/02/2035207) that openbsd > > has included stack-smashing protection using the ProPolice > > (

Re: Stack-smashing protection

2002-12-06 Thread David B Harris
On Sat, 7 Dec 2002 01:09:59 +0100 Albert Cervera Areny <[EMAIL PROTECTED]> wrote: > So it isn't really that the hole system runs 8% slower. Sorry for my > first explanation... Now I think it is an overhead which is afordable > seeing its benefits. For your purposes, anyways. As has been said, thi

Re: Stack-smashing protection

2002-12-06 Thread Albert Cervera Areny
s. > > regards > > Thing > > On Sat, 07 Dec 2002 09:29, Albert Cervera Areny wrote: > > I've read in slashdot > > (http://bsd.slashdot.org/article.pl?sid=02/12/02/2035207) that openbsd > > has included stack-smashing protection using the ProPolice > > (

Re: Stack-smashing protection

2002-12-06 Thread Thing
Lets see some papers/justification for this item, it may not be needed in all situations. regards Thing On Sat, 07 Dec 2002 09:29, Albert Cervera Areny wrote: > I've read in slashdot > (http://bsd.slashdot.org/article.pl?sid=02/12/02/2035207) that openbsd has > included stack-

Stack-smashing protection

2002-12-06 Thread Albert Cervera Areny
I've read in slashdot (http://bsd.slashdot.org/article.pl?sid=02/12/02/2035207) that openbsd has included stack-smashing protection using the ProPolice (http://www.trl.ibm.com/projects/security/ssp/) patch for GCC 3.2 I think it would be a great idea to use this patch with debian too as

Re: Stack-smashing protection

2002-12-06 Thread Thing
Lets see some papers/justification for this item, it may not be needed in all situations. regards Thing On Sat, 07 Dec 2002 09:29, Albert Cervera Areny wrote: > I've read in slashdot > (http://bsd.slashdot.org/article.pl?sid=02/12/02/2035207) that openbsd has > included stack-

Stack-smashing protection

2002-12-06 Thread Albert Cervera Areny
I've read in slashdot (http://bsd.slashdot.org/article.pl?sid=02/12/02/2035207) that openbsd has included stack-smashing protection using the ProPolice (http://www.trl.ibm.com/projects/security/ssp/) patch for GCC 3.2 I think it would be a great idea to use this patch with debian too as