Re: stackprotector: ascii armor the stack canary

2017-05-24 Thread Geert Uytterhoeven
On Fri, May 19, 2017 at 11:32 PM, Kees Cook wrote: > On Fri, May 19, 2017 at 2:26 PM, wrote: >> Zero out the first byte of the stack canary value on 64 bit systems, >> in order to prevent unterminated C string overflows from being able >> to successfully overwrite the canary, even if an attacker

Re: stackprotector: ascii armor the stack canary

2017-05-19 Thread Daniel Micay
On Fri, 2017-05-19 at 17:26 -0400, r...@redhat.com wrote: > Zero out the first byte of the stack canary value on 64 bit systems, > in order to prevent unterminated C string overflows from being able > to successfully overwrite the canary, even if an attacker somehow > guessed or obtained the canary

Re: stackprotector: ascii armor the stack canary

2017-05-19 Thread Kees Cook
On Fri, May 19, 2017 at 2:26 PM, wrote: > Zero out the first byte of the stack canary value on 64 bit systems, > in order to prevent unterminated C string overflows from being able > to successfully overwrite the canary, even if an attacker somehow > guessed or obtained the canary value. This al