Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chapters/data/memory-security: Clarify memoy security tasks #133

Open
teodutu opened this issue Nov 11, 2024 · 0 comments
Open

chapters/data/memory-security: Clarify memoy security tasks #133

teodutu opened this issue Nov 11, 2024 · 0 comments
Labels
area/content Content (Markdown) update area/reading Update to reading content kind/improve Improve / Update existing content / item topic/data Related to "Data" chapter

Comments

@teodutu
Copy link

teodutu commented Nov 11, 2024

The memory security tasks [1] and reading material [2] offer students too little information about ASLR and stack canaries.

ASLR

There is nothing written about how ASLR works and how the compilation and linking flags affect it. This information should be present in the reading material and students should be prompted to modify these flags in the task.

Stack Protector

The reading material never shows any Assembly code that handles the stack protector so when the task asks students to find it, they are confused. The reading material should provide these details. Additionally, the task should use a more gradual approach and add quiz items for each step:

  1. Which function has a stack canary?
  2. What is the canary's offset from rbp?
  3. What is the canary's offset from the beginning of the stack buffer?
  4. What is the return address's offset from the beginning of the stack buffer?
  5. Why does the program prin the "Stack smashing detected" message if you correctly overwrite both the stack canary and the return address?

[1] https://github.com/cs-pub-ro/operating-systems/tree/main/chapters/data/memory-security/drills/tasks

@teodutu teodutu added kind/improve Improve / Update existing content / item topic/data Related to "Data" chapter area/content Content (Markdown) update area/reading Update to reading content labels Nov 11, 2024
@teodutu teodutu changed the title chapters/compute/memory-security: Clarify memoy security tasks. chapters/compute/memory-security: Clarify memoy security tasks Nov 11, 2024
@teodutu teodutu changed the title chapters/compute/memory-security: Clarify memoy security tasks chapters/data/memory-security: Clarify memoy security tasks Nov 11, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
area/content Content (Markdown) update area/reading Update to reading content kind/improve Improve / Update existing content / item topic/data Related to "Data" chapter
Projects
None yet
Development

No branches or pull requests

1 participant