Re: Immunix OS Security update for netscape

[Crispin Cowan <crispin@WIREX.COM>]

Greg KH wrote:

> No, you are correct, I shouldn't have labeled this release with the
> "StackGuard" label on the rpm package to remain consistent with the
> current 6.2 package naming scheme.  It is just rebundling the binaries,
> and we do not compile Netscape with the StackGuard compiler.

However, we have built Mozilla with StackGuard, which required a few hacks to 
Mozilla to that it's
loadable module interface would recognize StackGuard stack frames.  The work 
was actually done by
Leslie Ann Ong as her term praper project in my winter security course
http://www.cse.ogi.edu/~crispin/527/

We haven't got around to releasing it, because it is tangential to our server 
business, and we'd have
to maintain the forward port of this patch as Mozilla marches on. If there's 
a core Mozilla developer
out there who would like to adopt this patch and get it pushed into the 
mainline, please contact us.

--
Crispin Cowan, Ph.D.
Chief Scientist, WireX Communications, Inc. http://wirex.com
Security Hardened Linux Distribution:       http://immunix.org