[LIP] segment registers to handle stack over flow
"suresh kumar" <suresh_vin-/iAzse42w/[email protected]>
| Newsgroups | gmane.user-groups.linux.india.programmers |
|---|---|
| Message-ID | <[email protected]> |
Hi you know about stack over flow exploit. generally the exploit code is written in data/heap portion of the code. and the address of that code is stored in the return address of the function to make the exploit. to load that address, segment register cs will be updated with the "ret" instruction. and while loading the segment selector in to the segment register, there are certain basic checks that will be done, to over come programatical errors. the checks include that a cs can be loaded with the selector of the executable segment. Since data and heap come under data segments, why is that there is no exception as that malicious code is in data portion of the code. Yeah I am talking specific to x86. Is there any thing wrong in my understanding? Is my question correct? regards Suresh V.V Suresh Kumar V.V Suresh Kumar -- ______________________________________________ IndiaInfo Mail - the free e-mail service with a difference! www.indiainfo.com Check out our value-added Premium features, such as an extra 20MB for mail storage, POP3, e-mail forwarding, and ads-free mailboxes! Powered by Outblaze ------------------------------------------------------- The SF.Net email is sponsored by: Beat the post-holiday blues Get a FREE limited edition SourceForge.net t-shirt from ThinkGeek. It's fun and FREE -- well, almost....http://www.thinkgeek.com/sfshirt