24 lines
982 B
Plaintext
24 lines
982 B
Plaintext
This is a library, which contains a safe reincarnations
|
|
of strcpy/strcat/sprintf and some other functions,
|
|
which is known to be a source to 99% of stack smashing
|
|
attacks since Morrison Worm.
|
|
|
|
Basic idea is: these functions never return in case
|
|
of modified stack frames. Instead, they kills current
|
|
process with SIG_SEGV, and, in case when program
|
|
just ignores it - calls exit(2). In 'paranoidal'
|
|
point of view, termination of a process is a much
|
|
less worth, than possible incorrect continuation.
|
|
|
|
This library can be used in two ways - you can just
|
|
install it as a port/package, and then relink critical
|
|
applications (such as a network daemons) with
|
|
-lparanoia -L/usr/local/lib, or you can override
|
|
standard functions in libc (using libparanoia/copy-to-libc
|
|
shell script) - in this case you'll get any application,
|
|
which uses shared libc, automatically protected.
|
|
|
|
WWW: http://www.lexa.ru/snar/libparanoia/
|
|
--
|
|
Alexandre Snarskii <snar@paranoia.ru>. Baltika-3 is better :)
|