add stack canary explainer

This commit is contained in:
Ward Wouts 2023-03-13 15:23:37 +01:00
parent 03cd6ada44
commit 7da89e8fbb

View file

@ -1,7 +1,7 @@
<!DOCTYPE html>
<html>
<head>
<title>Old skool stack smashing</title>
<title>♫ Stack smashing like it's 1999 ♫</title>
<meta charset="utf-8">
<style>
@import url(https://fonts.googleapis.com/css?family=Droid+Serif);
@ -384,7 +384,7 @@ template: inverse
]
.right-column[
- Stack canaries<br>
Place a value before the return address and check if it's been changed before returning from a function.
Place a value before the return address and check if it's been changed before returning from a function. (Good explainer here: https://www.sans.org/blog/stack-canaries-gingerly-sidestepping-the-cage/)
- Nonexecutable stack<br>
W^X (write or execute) won't execute code on the stack (but will still follow return addresses).
- Randomization<br>