topic executable_stack parameter testing in Operating System - HP-UX

executable_stack parameter testing

David Irish — Wed, 23 Apr 2008 20:05:47 GMT

We are running HP-UX 11i 11.11. I have been playing around with the executable_stack parameter (currently set to "2", which is the trial or debug mode). In several months I have not had any errors messages produced from this feature (buffer overflow protection). I'm just curious if anyone has tried to test this feature - and what they did?

Thanks David

Re: executable_stack parameter testing

James R. Ferguson — Wed, 23 Apr 2008 20:39:20 GMT

Hi David:

If you have been running without incident (i.e no logged messages in the 'dmesg' buffer) then it is certainly safe to reset the parameter to zero (0) for full protection.

There are some sample programs in:

http://insecure.org/stf/smashstack.html

...if you are interested for academic curiosity.

Regards!

...JRF...