[7538] in bugtraq
Re: A way to prevent buffer overflow exploits? (was: "Any user
daemon@ATHENA.MIT.EDU (Mark Wooding)
Thu Aug 6 12:13:31 1998
Date: Wed, 5 Aug 1998 16:40:31 -0000
Reply-To: Mark Wooding <mdw@EBI.AC.UK>
From: Mark Wooding <mdw@EBI.AC.UK>
X-To: Crispin Cowan <crispin@CSE.OGI.EDU>
To: BUGTRAQ@NETSPACE.ORG
In-Reply-To: <35C740D8.6E77D4A4@cse.ogi.edu>
Crispin Cowan <crispin@CSE.OGI.EDU> wrote:
> John D. Hardin wrote:
>
> > Or how about automatically allocating space just for local strings? This
> > would take care of buffer overflows with minimal impact, wouldn't it?
>
> That would break the C standard, which states that local variables are
> allocated in consecutive memory, with optional padding between them.
Cobblers.
You're thinking of structure allocation: the standard places no
restrictions on where implementations choose to place variables with
automatic storage duration.
-- [mdw]
