[34751] in bugtraq
Re: http://www.smashguard.org
daemon@ATHENA.MIT.EDU (Pavel Machek)
Fri Apr 30 21:25:16 2004
Date: Thu, 29 Apr 2004 23:55:07 +0200
From: Pavel Machek <pavel@ucw.cz>
To: Crispin Cowan <crispin@immunix.com>
Cc: Hilmi Ozdoganoglu <cyprian@purdue.edu>, Dave Paris <dparis@w3works.com>,
bugtraq@securityfocus.com
Message-ID: <20040429215507.GA22284@elf.ucw.cz>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <4025786E.8080703@immunix.com>
Hi!
> >The idea is not to create "custom CPUs" but to have our modification
> >picked up by major vendors. Clearly there is interest in applying
> >hardware to solve security issues based on the latest press releases
> >from AMD that AMD chips include buffer-overflow protection (see
> >Computer World, January 15, 2004).
> >
> As Theo said, the AMD buffer overflow "protection" is nothing more than
> sensible separation of R and X bits per page, fixing a glaring and
Actually it is not "sensible", and it is not separation.
You can have r--, r-x, but you can't have --x.
Pavel
--
934a471f20d6580d5aad759bf0d97ddc
