previous | start | next

General Technique

The gcc compiler generates code so that for each execution a random value is placed in the stack frame after the array storage.

A check can be made to see if this value has changed.

This so called canary word is inserted depending on various properties detected in the function, including if it declares an array of size 8 or more.

So this technique will check other functions, not just the "dangerous" C library function gets.



previous | start | next