Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <c5d05c8e-ae1e-e570-beb5-1c070b87e1a5@redhat.com>
Date: Wed, 21 Jun 2017 11:33:59 -0600
From: Jeff Law <law@...hat.com>
To: Daniel Micay <danielmicay@...il.com>, oss-security@...ts.openwall.com
Subject: Re: Re: Qualys Security Advisor -- The Stack Clash

On 06/20/2017 12:44 AM, Daniel Micay wrote:

> I think it's also worth mentioning the segmented stack support in GCC
> and LLVM that was added for Go. It's possible to use it for C with the
> __morestack call set up to simply abort when stack space is exhausted.
> 
> That's what Rust was doing after it dropped segmented stacks, but they
> wanted to move to stack probes for efficiency and prematurely dropped
> these function prelude checks.
> 
> It's not efficient, but it works, unlike -fstack-check.
> 
> I don't think it makes sense for general purpose distributions to adopt
> it but it's an available option for others with more concern about this
> issue.
Yup.  go's split-stacks are another option.  As you mention, probably
not performant enough for a general purpose distribution, but could be
interesting for more specialized needs.

jeff

Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.