[Patch][BZ 14594] Demangle function pointers before testing them
Jeff Law
law@redhat.com
Thu Sep 20 21:35:00 GMT 2012
On 09/20/2012 03:18 PM, Rich Felker wrote:
> Wouldn't the opposite problem also happen: if the clear pointer is
> NULL, the mangled pointer would be equal to the guard, which is random
> and might point to anything. If it's possible to arrange for the clear
> pointer to be NULL, it seems that nop slides would make this an easy
> attack vector...
This argues that the instance in btowc ought to be fixed as well.
jeff
More information about the Libc-alpha
mailing list