Check out the new USENIX Web site. next up previous
Next: Solar Designer's non-executable stack Up: Related work Previous: StackShield

Libsafe

Libsafe [3] is an implementation of vulnerable copy functions in C library such as strcpy(). In addition to the original functionality of those functions, it imposes a limit on the involved copy operations such that they do not overwrite the return address. The limit is determined based on the notion that the buffer cannot extend beyond its stack frame. Thus the maximum size of a buffer is the distance between the address of the buffer and the corresponding frame pointer. Libsafe is implemented as a shared library that is preloaded to intercept C library function calls. Programs are protected without recompilation unless they are statically linked with the C library. Libsafe protects only those C library functions whereas StackGuard and StackShield protect all functions.