Chinaunix首页 | 论坛 | 博客
  • 博客访问: 177674
  • 博文数量: 42
  • 博客积分: 2185
  • 博客等级: 大尉
  • 技术积分: 455
  • 用 户 组: 普通用户
  • 注册时间: 2009-06-11 21:32
文章分类

全部博文(42)

文章存档

2012年(5)

2011年(13)

2010年(6)

2009年(18)

我的朋友

分类: LINUX

2011-12-17 11:59:36

SSP: stack-smashing-protector, can be used to detect stack corruption. CFLAGS+= -fstack-protector
MUDFLAP: otherthan SSP, but can also used to detect heap corruption, but it need also link to libmudflap. CFLAGS+=-fmudflap, LDFLAGS+=-lmudflap
_FORTIFY_SOURCE: Can be used to simple buffer overflow in gets/memcpy/strcpy/...  CFLAGS+=-D_FORTIFY_SOURCE

Please see attachment for details. There is a bug in local.c, SSP/_FORTIFY_SOURCE can't detect it since the corruption is in heap area not in stack area. Bug is fixed by local.diff.

 ssp-mudflap-test.tar.xz.zip      (please remove the .zip extension)
阅读(1236) | 评论(0) | 转发(0) |
给主人留下些什么吧!~~