ANNOUNCEMENT: Live Wireshark University & Allegro Packets online APAC Wireshark Training Session
July 17th, 2024 | 10:00am-11:55am SGT (UTC+8) | Online

Ethereal-dev: Re: [Ethereal-dev] Canary checking added to emem.c

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Gilbert Ramirez <gram@xxxxxxxxxxxxxxx>
Date: Tue, 10 Jan 2006 07:57:50 -0600
I suppose it comes from the old usage of canaries (the birds) in
mining. If noxious gases were present, and the canary died, then the
miners knew to exit quickly!

Live canary == good
Dead canary == bad

--gilbert

On 1/10/06, Ulf Lamping <ulf.lamping@xxxxxx> wrote:
> Jaap Keuter wrote:
>
> >It's a trick to put a specific value (the canary) at the top of the stack
> >frame or end of allocated buffer. When the stack frame of buffer is
> >released, the canary should still be there. If not the code has reached
> >too far up the stack or into the buffer, indicating an error.
> >
> >Check this paper on stackguard:
> >http://gcc.fyxm.net/summit/2003/Stackguard.pdf
> >
> >
> Ah, thanks for the explanation.
>
> I know this technique as adding a "gap" or "no mans land", never heard
> canary before :-)
>
> Regards, ULFL
>
> _______________________________________________
> Ethereal-dev mailing list
> Ethereal-dev@xxxxxxxxxxxx
> http://www.ethereal.com/mailman/listinfo/ethereal-dev
>
>