Re: Buffer overflow and code execution on iSeries

Scott Klement <[email protected]>
Newsgroups gmane.comp.lang.as400.mi
Message-ID <[email protected]>
[SNIP]
> So, as I'm thinking about it, code execution via buffer overrun is 
> unlikely, ne, VERY unlikely, on iSeries, but it _is_ possible. Right?
[SNIP]

I just wanted to point out that BIND runs in PASE. It's not a native 
iSeries program, but rather one that's compiled for AIX, and run under 
emulation in PASE.

Is there tagged pointer validation on an AIX system?

I wonder if the fact that it's running in PASE means that it's able to 
bypass the tagged pointer checks, and that buffer overflows might still be 
a concern. It may not be able to get a pointer to native iSeries code, but 
it could still redirect it to run some different PASE code, couldn't it?

_______________________________________________
This is the MI Programming on the AS400 / iSeries (MI400) mailing list
To post a message email: MI400-Zwy7GipZuJhWk0Htik3J/[email protected]
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/mi400
or email: MI400-request-Zwy7GipZuJhWk0Htik3J/[email protected]
Before posting, please take a moment to review the archives
at http://archive.midrange.com/mi400.
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.