Re: nondeterministic symbols relocation

2009-05-27 Thread Giuseppe Scrivano
Hello Ian, Ian Lance Taylor writes: > Randomizing addresses at runtime would have slightly more effect. > That is already implemented in the linker and GNU/Linux kernel, via > -pie. This makes sense. Buw what about other systems where this is not done at runtime? Wouldn't in that case offer a

Re: nondeterministic symbols relocation

2009-05-27 Thread Ian Lance Taylor
Giuseppe Scrivano writes: > I noticed that ld relocates symbols assigning them always the same > values in a deterministic way. I am quite sure this is the desired > behaviour but wouldn't be better to add a bit of randomness? > Buffer overflow exploits can take advantage to know in advance the

nondeterministic symbols relocation

2009-05-27 Thread Giuseppe Scrivano
Hi everybody, I noticed that ld relocates symbols assigning them always the same values in a deterministic way. I am quite sure this is the desired behaviour but wouldn't be better to add a bit of randomness? Buffer overflow exploits can take advantage to know in advance the position of a symbol,