Re: ProPolice: best way to fill canary

2005-07-08 Thread Mike Silbersack
On Fri, 8 Jul 2005, Jeremie Le Hen wrote: The second method requires to introduce the kern.arnd sysctl (KERN_ARND). FYI, note that NetBSD has kern.urandom (KERN_URND) and they define KERN_ARND to be an alias to this. Your comments will be welcome. Best regards, -- Jeremie Le Hen I don't se

Re: ProPolice: best way to fill canary

2005-07-08 Thread ALeine
[EMAIL PROTECTED] wrote: > I was meaning random length fixed value... That may be what you meant, but that's definitely not what you said. > and unless the attacker wants to set the return address to 0x0... You may want to read the paper "Four different tricks to bypass StackShield and StackGu

Re: ProPolice: best way to fill canary

2005-07-08 Thread Neo-Vortex
On Fri, 8 Jul 2005, ALeine wrote: > [EMAIL PROTECTED] wrote: > > > On Fri, 8 Jul 2005, Jeremie Le Hen wrote: > > > > > Hello hackers, > > > > > > I'm going to disturb you once again with ProPolice. The > > > original ProPolice patch, as well as most of FreeBSD variants > > > and Linux one, uses

Re: ProPolice: best way to fill canary

2005-07-08 Thread ALeine
[EMAIL PROTECTED] wrote: > On Fri, 8 Jul 2005, Jeremie Le Hen wrote: > > > Hello hackers, > > > > I'm going to disturb you once again with ProPolice. The > > original ProPolice patch, as well as most of FreeBSD variants > > and Linux one, uses /dev/urandom to fill the "canary" with > > random

Re: ProPolice: best way to fill canary

2005-07-08 Thread Neo-Vortex
On Fri, 8 Jul 2005, Jeremie Le Hen wrote: > Hello hackers, > > I'm going to disturb you once again with ProPolice. The original > ProPolice patch, as well as most of FreeBSD variants and Linux one, > uses /dev/urandom to fill the "canary" with random data (the canary > is what is going to be pu

ProPolice: best way to fill canary

2005-07-08 Thread Jeremie Le Hen
Hello hackers, I'm going to disturb you once again with ProPolice. The original ProPolice patch, as well as most of FreeBSD variants and Linux one, uses /dev/urandom to fill the "canary" with random data (the canary is what is going to be put between buffer and return address in the stack). OTOH

Re: C programming question

2005-07-08 Thread Mike Meyer
On Mon, 04 Apr 2005 11:43:21 -0700 Matt <[EMAIL PROTECTED]> wrote: > I need some help understanding some C code. cdecl (devel/cdecl) is your friend. > int (*if_ioctl) > (struct ifnet *, int, caddr_t); explain int (*if_ioctl)(struct ifnet *, int, caddr_t) declare if_ioctl as pointer