ExecutableStacks
|
Size: 1874
Comment:
|
Size: 1910
Comment:
|
| Deletions are marked like this. | Additions are marked like this. |
| Line 22: | Line 22: |
| == Shipped Precompiled Binary == * fglrx-installer * nvidia-graphics-drivers-173 * nvidia-graphics-drivers-180 * nvidia-graphics-drivers-71 * nvidia-graphics-drivers-96 |
|
| Line 23: | Line 30: |
| * fglrx-installer | |
| Line 30: | Line 36: |
| * nvidia-graphics-drivers-173 * nvidia-graphics-drivers-180 * nvidia-graphics-drivers-71 * nvidia-graphics-drivers-96 |
There are still some programs that have executable stack regions.
- check an ELF binary: "readelf -l $BIN | grep GNU_STACK" shows with "E" flag.
Gentoo write-up of what to do: http://www.gentoo.org/proj/en/hardened/gnu-stack.xml
Main/Restricted Packages
Originally generated from the ELF files with executable stacks in Karmic main.
Fixed
- zip
- bogl
Nested Functions
Uses Nested Functions which compiler generates as trampolines on the stack.
- grub
grub2 upstream bug
Stack Trampolines
- klibc (setjmp implementation)
- kexec-tools (statically linked against klibc)
Shipped Precompiled Binary
- fglrx-installer
- nvidia-graphics-drivers-173
- nvidia-graphics-drivers-180
- nvidia-graphics-drivers-71
- nvidia-graphics-drivers-96
Unclassified
- icon
- john
- link-grammar
- mbr
- memtest86+
- mono
- openjdk-6
Fedora Patches
http://cvs.fedoraproject.org/viewcvs/devel/gdk-pixbuf/gtk+-2.2.2-noexecstack.patch?view=markup
http://cvs.fedoraproject.org/viewcvs/devel/libdv/libdv-0.104-no-exec-stack.patch?view=markup
http://cvs.fedoraproject.org/viewcvs/devel/lightning/lightning-1.2-execstack.patch?view=markup
http://cvs.fedoraproject.org/viewcvs/devel/net-tools/net-tools-1.60-execshield.patch?view=markup
http://cvs.fedoraproject.org/viewcvs/devel/net-tools/netplug-1.2.9-execshield.patch?view=markup
http://cvs.fedoraproject.org/viewcvs/devel/mlton/mlton-20070826-no-execmem.patch?view=markup
SecurityTeam/Roadmap/ExecutableStacks (last edited 2017-08-22 14:25:31 by jdstrand)