ExecutableStacks

Differences between revisions 1 and 7 (spanning 6 versions)

There are still some programs that have executable stack regions.

open bugs in LP
check an ELF binary: "readelf -l $BIN | grep GNU_STACK" shows with "E" flag.
Gentoo write-up of what to do: http://www.gentoo.org/proj/en/hardened/gnu-stack.xml

Main/Restricted Packages

Originally generated from the ELF files with executable stacks in Karmic main.

Uses Nested Functions which compiler generates as trampolines on the stack.

SecurityTeam/Roadmap/ExecutableStacks (last edited 2017-08-22 14:25:31 by jdstrand)

-  ⇤ ← Revision 1 as of 2009-08-03 15:21:48 → 
  Size: 1478
  Editor: 89
  Comment:
+   ← Revision 7 as of 2009-08-03 16:01:30 → ⇥
  Size: 1874
  Editor: 89
  Comment:
-Deletions are marked like this.
+Additions are marked like this.
 Line 1:
+There are still some programs that have executable stack regions.
  * [[https://bugs.launchpad.net/ubuntu/+bugs?field.tag=execstack|open bugs in LP]]
  * check an ELF binary: "readelf -l $BIN | grep GNU_STACK" shows with "E" flag.
  * Gentoo write-up of what to do: http://www.gentoo.org/proj/en/hardened/gnu-stack.xml

= Main/Restricted Packages =
-Line 3:
+Line 9:
+== Fixed ==
 * zip
 * bogl
-Line 4:
+Line 14:
-Uses [[http://grub.enbug.org/NestedFunctions|Nested Functions]] which compiler generates as trampolines on the stack.    * bogl [[http://cvs.fedoraproject.org/viewvc//devel/bogl/bogl-0.1.18-noexecstack.patch?view=markup|patch]]
+Uses [[http://grub.enbug.org/NestedFunctions|Nested Functions]] which compiler generates as trampolines on the stack.
-Line 7:
+Line 16:
- * grub2
+ * grub2 [[http://savannah.gnu.org/bugs/?25220|upstream bug]]

== Stack Trampolines ==
 * klibc (setjmp implementation)
 * kexec-tools (statically linked against klibc)
-Line 23:
+Line 36:
-== Harmless ==
 * kexec-tools
 * klibc