ExecutableStacks

Differences between revisions 7 and 11 (spanning 4 versions)

There are still some programs that have executable stack regions.

open bugs in LP
check an ELF binary: "readelf -lW $BIN | grep GNU_STACK" shows with "E" flag.
Gentoo write-up of what to do: http://www.gentoo.org/proj/en/hardened/gnu-stack.xml
-Wl,-z,noexecstack will change the behavior of asm without stack markings.

Main/Restricted Packages

Originally generated from the ELF files with executable stacks in Karmic main.

Uses Nested Functions which compiler generates as trampolines on the stack.

SecurityTeam/Roadmap/ExecutableStacks (last edited 2017-08-22 14:25:31 by jdstrand)

-  ⇤ ← Revision 7 as of 2009-08-03 16:01:30 → 
  Size: 1874
  Editor: 89
  Comment:
+   ← Revision 11 as of 2009-08-03 17:12:33 → ⇥
  Size: 2043
  Editor: 89
  Comment:
-Deletions are marked like this.
+Additions are marked like this.
 Line 3:
-  * check an ELF binary: "readelf -l $BIN | grep GNU_STACK" shows with "E" flag.
+  * check an ELF binary: "readelf -lW $BIN | grep GNU_STACK" shows with "E" flag.
 Line 5:
+  * -Wl,-z,noexecstack will change the behavior of asm without stack markings.
-Line 14:
+Line 15:
-Uses [[http://grub.enbug.org/NestedFunctions|Nested Functions]] which compiler generates as trampolines on the stack.
+Uses [[http://grub.enbug.org/NestedFunctions|Nested Functions]] which compiler generates as [[http://gcc.gnu.org/onlinedocs/gccint/Trampolines.html|trampolines]] on the stack.
-Line 18:
+Line 19:
-== Stack Trampolines ==
+== Trampolines ==
-Line 22:
+Line 23:
+== Shipped Precompiled Binary ==
 * fglrx-installer
 * nvidia-graphics-drivers-173
 * nvidia-graphics-drivers-180
 * nvidia-graphics-drivers-71
 * nvidia-graphics-drivers-96
-Line 23:
+Line 31:
- * fglrx-installer
-Line 30:
+Line 37:
- * nvidia-graphics-drivers-173
 * nvidia-graphics-drivers-180
 * nvidia-graphics-drivers-71
 * nvidia-graphics-drivers-96