DEP, the short for Data Execution Prevention, is a security feature included in recent operating systems meant to prevent an application or service from executing code from a non-executable memory region.
Questions tagged [dep]
99 questions
102
votes
2 answers
Unexpected exec permission from mmap when assembly files included in the project
I am banging my head into the wall with this.
In my project, when I'm allocating memory with mmap the mapping (/proc/self/maps) shows that it is an readable and executable region despite I requested only readable memory.
After looking into strace…
Ben Hirschberg
- 1,410
- 1
- 12
- 17
13
votes
2 answers
Why is SQL Server deprecating SET ANSI_PADDING OFF?
According to MSDN BOL (Books Online) on SET ANSI_PADDING,
In a future version of Microsoft SQL Server ANSI_PADDING will always be ON and any applications that explicitly set the option to OFF will produce an error. Avoid using this feature in new…
dance2die
- 35,807
- 39
- 131
- 194
10
votes
5 answers
IIS: How to disable Data Execution Prevention in Windows Server 2008?
I've been trying to disable DEP on my windows 2008 dev box and have not succeeded.
I've tried:
System Properties->Performance Options->Data Execution Prevention->Turn on DEP for essential Windows programs and services only
(still happens)
System…
Doug
- 14,387
- 17
- 74
- 104
6
votes
1 answer
Golang cannot find module providing package {PACKAGE_NAME}: working directory is not part of a module
I am wondering what is going on with my local build? I want to test deployment to DEV to fix problem, but I can’t build.
make build-mac
env GOOS=darwin GOARCH=amd64 go build -ldflags "-s -w -X main.version=v1.0.20-16-ga0298c0 -X…
Awesome Infinity
- 121
- 1
- 2
- 6
6
votes
1 answer
Exploiting a string-based overflow on x86-64 with NX (DEP) and ASLR enabled
Consider the following vulnerable code/program:
#include
int main(int argc, char *argv[]) {
char buf[16];
strcpy(buf, argv[1]);
return 0;
}
On IA-32 (x86, 32-bit) running Linux with NX and ASLR enabled, I would exploit this…
Propantriol
- 161
- 4
5
votes
0 answers
How to disable DEP on OSX Lion
A dylib I created crashes under Lion, but works just fine under Snow Leopard. This seems to be caused by a compiler bug (Delphi XE2, Upd.4) which results in code ending up in a data section.
When the dylib is loaded, there's a SIGBUS with…
msohn
- 326
- 2
- 12
5
votes
2 answers
Jumping to the data segment
I am testing an assembler I am writing which generates X86 instructions. I would like to do something like this to test whether the instructions work or not.
#include
unsigned char code[2] = {0xc9, 0xc3};
int main() {
void (*foo)();
…
michael dillard
- 449
- 2
- 5
- 14
5
votes
2 answers
ASLR and DEP in Delphi, How to tell?
From http://blogs.msdn.com/b/michael_howard/archive/2007/04/04/codegear-s-new-delphi-2007-supports-aslr-and-nx.aspx,
I am using {$SETPEOPTFLAGS $140} in my project file right under the program name to get address space layout randomization (ASLR)…
BrownFox97
- 393
- 1
- 3
- 9
4
votes
3 answers
How to define, DEP is ON in system
DelphiXe; Xp,Vista,Win7,WSrv2008R2;
0.DEP(Data Execution Prevention) CPU supported
Function isCpuDEP:bool;
begin
Result:=... //???
end;
1.How to define, DEP is ON in system?
Function isEnableDEP:bool; // Win Xp comparable
begin
Result:=false;if…
Gu.
- 1,947
- 4
- 30
- 49
4
votes
2 answers
How can I spring.net inject in to methods?
I posted to following on the spring.net forum but also hoped I may get some value views here:
I am looking at some advice as to how I might achieve the following requirement.
Firstly some background - I am using Spring.NET to achieve IOC depdenecny…
amateur
- 43,371
- 65
- 192
- 320
4
votes
2 answers
JIT compilation and DEP
I was thinking of trying my hand at some jit compilataion (just for the sake of learning) and it would be nice to have it work cross platform since I run all the major three at home (windows, os x, linux).
With that in mind, I want to know if there…
mac
- 113
- 1
- 5
4
votes
1 answer
Go Dep - sync Gopkg.toml with vendor
Is there a way to create or sync Gokpkg.toml with the packages that i import in my .go files?
If my Gopkg.toml is empty and I run dep ensure, it would download all the packages that I import in my code to the vendor folder but it won't update the…
areller
- 4,800
- 9
- 29
- 57
4
votes
1 answer
dep init -v hangs upon execution
I'll start with a disclaimer here. I'm running go on Ubuntu 18.0.4 on Windows subsystem.
I have a package in which I was able to run "dep init" successfully from the windows command line. I created a new clone (successful clone, so no network…
Eddy Jones
- 43
- 5
4
votes
2 answers
Incompatibilities between Indy 9 and Windows Server 2003?
I'm having a problem with a Delphi application on some Windows 2003 servers. It uses a webservice call to connect with another server and transmit data back and forth. As soon as the app gets to the Authenticate method, the app dies. The app has…
mcmar
- 438
- 5
- 15
4
votes
2 answers
how to disable Data Execution prvention(DEP) in ubuntu to execute shellcode
am using ubuntu 14.04, 64bit.
i am studying shellcode writing. So to spawn a shell i wrote the following program
segment .text
global _start:
_start:
jmp short GotoCall
shellcode:
pop esi
xor eax, eax
mov byte [esi + 7], al …
mr.Cracker
- 211
- 3
- 14