Re: security patch

From: Valdis . Kletnieks
Date: Thu Sep 22 2005 - 15:34:29 EST


On Thu, 22 Sep 2005 14:24:48 MDT, Zan Lynx said:

> An interesting thing that I don't think has been done before is to
> create a map linking stack call chains to syscalls. If the call stack
> doesn't match then it isn't a valid call.

I suspect longjmp() and friends would play havoc on this, and vice versa,
as well as those syscalls that are legal from inside signal handlers, and
a few other cases.

What validity check were you planning to make on the stack call chain?

Attachment: pgp00000.pgp
Description: PGP signature