2 ms·
It sounds from the article that "-fstack-protector-all" might remove everything except the denial of service. "...arbitrary code execution is confirmed when th
by chasil 4y ago
It sounds from the article that "-fstack-protector-all" might remove everything except the denial of service.
"...arbitrary code execution is confirmed when the library is compiled without stack canaries, but unconfirmed when stack canaries are present, and denial-of-service is confirmed in all cases."
Everything should be compiled with all available compiler defenses:
https://manpages.debian.org/testing/devscripts/hardening-check.1.en.html https://manpages.debian.org/testing/devscripts/hardening-che...
- chasil 4y agoIt does appear safe with the OS package on CentOS 7. $ hardening-check /usr/lib64/libsqlite3.so.0.8.6 /usr/lib64/libsqlite3.so.0.8.6: Position Independent Executable: no, regular shared library (ignored) Stack protected: yes Fortify Source functions: yes (some protected functions found) Read-only relocations: yes Immediate binding: no, not found!