Subject: Re: Code on stack (Re: exploit with memcpy())
To: TAMURA Kent <email@example.com>
From: Jason R Thorpe <firstname.lastname@example.org>
Date: 07/04/2002 00:21:30
On Thu, Jul 04, 2002 at 01:50:12PM +0900, TAMURA Kent wrote:
> It is interesting.
> I have heard gcc generates trampoline code on stack in some cases.
Yes, it does, but only if you use the features that require it
in your programs (e.g. nested functions).
In any case, the majority of programs do NOT use trampolines, and
so the biggest barrier to a no-execute stack was signals. Once that
is fixed, then we can at least provide the option to do so.
-- Jason R. Thorpe <email@example.com>