suggestion for projects page: sort frame vars
DJ Delorie
dj@redhat.com
Tue Jan 11 04:31:00 GMT 2005
> This seems related to one of the techniques ProPolice uses, in that
> it places pointers before buffers to keep buffer overruns from
> overwriting pointers in the same stack frame (in addition to the
> protections that detect overrunning the stack frame itself).
Once the infrastructure is in place to rearrange the local frame,
there's lots of things you can do with it.
At one point I found myself adding random small amounts to every fixed
buffer size in a program, to harden it against rootkits. To bad
random variations in frame size can't be done at runtime.
More information about the Gcc
mailing list