Re: A way to prevent buffer overflow exploits?

conway@cs.mu.OZ.AU (Thomas Charles CONWAY)
17 Aug 1998 20:36:17 -0400

          From comp.compilers

Related articles
[7 earlier articles]
Re: A way to prevent buffer overflow exploits? bear@sonic.net (Ray Dillinger) (1998-08-10)
Re: A way to prevent buffer overflow exploits? eodell@pobox.com (1998-08-13)
Re: A way to prevent buffer overflow exploits? khays@sequent.com (1998-08-16)
Re: A way to prevent buffer overflow exploits? shriram@cs.rice.edu (Shriram Krishnamurthi) (1998-08-16)
Re: A way to prevent buffer overflow exploits? conway@cs.mu.OZ.AU (1998-08-16)
Re: A way to prevent buffer overflow exploits? genew@vip.net (1998-08-17)
Re: A way to prevent buffer overflow exploits? conway@cs.mu.OZ.AU (1998-08-17)
Re: A way to prevent buffer overflow exploits? chase@world.std.com (David Chase) (1998-08-19)
Re: A way to prevent buffer overflow exploits? eodell@pobox.com (1998-08-19)
Re: A way to prevent buffer overflow exploits? richard@exaflop.org (Richard Matthias) (1998-08-19)
Re: A way to prevent buffer overflow exploits? joachim.durchholz@munich.netsurf.de (Joachim Durchholz) (1998-08-22)
| List of all articles for this month |

From: conway@cs.mu.OZ.AU (Thomas Charles CONWAY)
Newsgroups: comp.compilers
Date: 17 Aug 1998 20:36:17 -0400
Organization: Computer Science, The University of Melbourne
References: 98-07-242 98-07-246 98-08-014 98-08-029 98-08-081 98-08-107
Keywords: C, practice, comment

Shriram Krishnamurthi <shriram@cs.rice.edu> writes:


>[Were those the experiments that showed that nearly every program that
>came with Unix crashed when fed random input? Pretty sad. -John]


And most of the problems were not fixed in the later trials,
even though the authors had pinpointed most of the bugs. IIRC, the
GNU and Linux tool sets were the top two in terms of reliability.


ObCompilers: Apart from someone's hacked version of gcc, what C
compilers will insert array bounds checking for you?


--
Thomas Conway <conway@cs.mu.oz.au>
[I think that Centerline's tools did that, but I don't know what's become
of them now that Centerline is kaput. -John]
--


Post a followup to this message

Return to the comp.compilers page.
Search the comp.compilers archives again.