fusesource/jansi-native

Jansi-native libraries are not stack protected

Closed this issue · 1 comments

The checksec tool (http://www.trapkit.de/tools/checksec.html) reports that the native libraries are not stack protected. The lack of the protection could lead to change of control flow by overwriting the return address from a function on the stack.

The result of the tool execution was that no canary was found in both linux libraries:
image001

I'm planning a release soon, so if you can provide any hint on how to fix the problem, I'll happily have a look.