Uli Drepper part 2: Buffer overflow and libc attacks

Loading...

Sign in or sign up now!
Alert icon
Upgrade to the latest Flash Player for improved playback performance. Upgrade now or more info.
1,960
Loading...
Alert icon
Sign in or sign up now!
Alert icon

Uploaded by on Dec 20, 2007

In the second of five films featuring Uli Drepper, he talks a little more about buffer overflows and another security implementation currently being used.

Learn a little about libc attacks stemming from buffer overflows and the canaries that serve to protect the stack in these emergencies.

  • likes, 0 dislikes

Link to this comment:

Share to:
see all

All Comments (1)

Sign In or Sign Up now to post a comment!
  • It still can succeed if you remember at the point the function has not returned yet there can be variables or arguments still being used and if the function happens to overwrite a pointer to anyone of these that is controllable then u can overwrite the .IDATA security cookie or ("canary") so that the authoritive comparison is passed and both look the same. There is still ways around it even with SEH handler overwrites that completely bypasses this weak security. It's not completely secure.

Loading...

Alert icon
0 / 00Unsaved Playlist Return to active list
    1. Your queue is empty. Add videos to your queue using this button:
      or sign in to load a different list.
    Loading...Loading...Saving...
    • Clear all videos from this list
    • Learn more