Compilation with SSP (Stack smash protection)

PlatinumX · 11-14-2008, 04:24 PM

Hi all,

To avoid buffer overflow, i am compiling a software with GCC 4.3 and the Stack Smash Protection flag raised (-fstack-protector).

I would like to be sure SSP was really used when compiling the soft.

Is there a way to verify if a binary is using SSP ?

Thanks

estabroo · 11-14-2008, 04:28 PM

Easiest way is to look up a tutorial on stack smashing, take their example victim program, compile it with stack protection and follow the tutorial, if the tutorial works then ssp either isn't compiled in or didn't work.

PlatinumX · 11-14-2008, 04:38 PM

Yea I could do this.

But my aim is to check for a given program if SSP was enabled.

I can't "guess" this info only whith the binary ?

Thx

estabroo · 11-14-2008, 05:57 PM

compile it both ways and check the difference with cmp and elf tools like objdump