SecurityFocus

[ANNOUNCE] glibc heap protection patch Dec 01 2003 07:31PM
William Robertson (wkr cs ucsb edu) (2 replies)

Re: [ANNOUNCE] glibc heap protection patch Dec 02 2003 02:03PM
Stefan Esser (stefan suspekt org) (1 replies)

Re: [ANNOUNCE] glibc heap protection patch Dec 02 2003 05:16PM
William Robertson (wkr cs ucsb edu) (1 replies)

Re: [ANNOUNCE] glibc heap protection patch Dec 03 2003 01:01PM
Stefan Esser (se nopiracy de) (1 replies)

Re: [ANNOUNCE] glibc heap protection patch Dec 03 2003 10:25PM
William Robertson (wkr cs ucsb edu)

Re: [ANNOUNCE] glibc heap protection patch Dec 02 2003 11:27AM
Eugene Tsyrklevich (eugene securityarchitects com) (1 replies)

Re: [ANNOUNCE] glibc heap protection patch Dec 02 2003 07:33PM
William Robertson (wkr cs ucsb edu) (1 replies)

Re: [ANNOUNCE] glibc heap protection patch Dec 03 2003 07:54AM
Han Boetes (han mijncomputer nl) (1 replies)

William Robertson wrote:
> It seems that this should be patched to use some source of randomness
> such as /dev/random instead of time().

I ported arc4random from OpenBSD to linux some time ago. All I had to
do was to change the sysctl:

http://www.xs4all.nl/~hanb/software/arc4random.tar.bz2

I think it's a very usefull function.

# Han

[ reply ]

Re: [ANNOUNCE] glibc heap protection patch Dec 04 2003 05:42PM
Adam Shostack (adam homeport org) (1 replies)

Re: [ANNOUNCE] glibc heap protection patch Dec 04 2003 10:25PM
Jim Knoble (jmknoble pobox com)