Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > comp.compilers > #1163
| From | Terrence Enger <tenger@iseries-guru.com> |
|---|---|
| Newsgroups | comp.compilers |
| Subject | Re: Self-modifying code, Function pointers & { Safety, Security} |
| Date | 2014-03-15 09:29 -0400 |
| Organization | Compilers Central |
| Message-ID | <14-03-041@comp.compilers> (permalink) |
| References | <14-03-015@comp.compilers> <14-03-016@comp.compilers> |
Kaz Kylheku <kaz@kylheku.com> wrote (with blank lines snipped to keep the email-filter happy): > On 2014-03-07, Seima Rao <seimarao@gmail.com> wrote: > > We are used to separation of code from data at the language level. [snip Kaz's response] > > However, two features disupt security : > > i) self-modifying code > > i.e. writing to code space > Note that loading an executable on any operating system constitutes > the above. I believe that the IBM system/i is an exception to that general rule. Only the operating system can write to the code space of a program object. This *does* contribute to the security of the system. [Burroughs mainframes have done that since the 1960s. I wouldn't put too much faith in the security implications though; I once saw a demo of hacking computerized voting machines even though all of the code was in ROM. They constructed a stack with pointers to bits of routines that could be exploited, and then just did a return. -John]
Back to comp.compilers | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread
Self-modifying code, Function pointers & { Safety, Security} Seima Rao <seimarao@gmail.com> - 2014-03-07 21:34 +0530
Re: Self-modifying code, Function pointers & { Safety, Security} Kaz Kylheku <kaz@kylheku.com> - 2014-03-09 20:36 +0000
Re: Self-modifying code, Function pointers & { Safety, Security} Terrence Enger <tenger@iseries-guru.com> - 2014-03-15 09:29 -0400
Re: Self-modifying code, Function pointers & { Safety, Security} Martin Ward <martin@gkc.org.uk> - 2014-03-14 14:15 +0000
Re: Self-modifying code, Function pointers & { Safety, Security} seimarao@gmail.com - 2014-03-20 00:42 -0700
Re: Self-modifying code, Function pointers & { Safety, Security} federation2005@netzero.com - 2014-04-13 12:41 -0700
Re: Self-modifying code, Function pointers & { Safety, Security} Stefan Monnier <monnier@iro.umontreal.ca> - 2014-04-16 09:18 -0400
csiph-web