Stack Overflow
Stack Overflow

Questions tagged [dep]

DEP, the short for Data Execution Prevention, is a security feature included in recent operating systems meant to prevent an application or service from executing code from a non-executable memory region.

99 questions
4
votes
1 answer

How can I enable ASLR, DEP and SafeSEH on an exe in codeblocks using mingw?

I have tried using -dynamicbase -pie and -e_mainCRTStartup in linker options for ASLR but when I load it up in ollydbg it always loads at 400000
shawn
  • 4,063
  • 7
  • 37
  • 54
4
votes
1 answer

How to disable DEP

We have an app where some parts of the heap are executed as assembly instructions / for testing purposes - we download programs to PLCs but allow users to simulate running their applications by executing their code before downloading to the PLC.…
AndersK
  • 35,813
  • 6
  • 60
  • 86
4
votes
1 answer

Disabling DEP for an Outlook 2010 Add-In

Is there any way to do this? My legacy VB6 add-in utilizes a legacy (likely C++) third party component to make some UI "skin" enhancements. It works fine in Outlook 2000-2007 but fails in 2010 due to DEP - and likely the manner in which my…
RyanMac
  • 767
  • 1
  • 6
  • 18
3
votes
0 answers

Security: How come we still hear about many stack execution security flaws?

Security: How come we still hear about many stack execution security flaws even though mechanisms such as NX bit DEP and ASLR exist so many years ? Have hackers found ways to circumvent these ? When looking through relatively recent fixed security…
thedrs
  • 1,412
  • 12
  • 29
3
votes
0 answers

How to override vendor packages with local src in dep (for local development)

Pseudo project setup: $GOPATH/src/github.com/foo/common-libs $GOPATH/src/github.com/foo/my-project (has a dependency on common-libs managed by dep, copy in /vendor directory Can't find a way to edit common-libs locally (i.e. in /src) and have…
user1508460
  • 83
  • 5
3
votes
1 answer

How to deploy Go apps with internal package to Heroku using `dep`

I am using Heroku's Golang buildpack to deploy a simple web app with the following structure my-app/ handler/ user.go session.go vendor/ github.com/ golang.org/ main.go Gopkg.toml …
mofury
  • 644
  • 1
  • 11
  • 23
3
votes
2 answers

Is there a link between dep and the bazel Go rules?

Intro: dep is a tool to manage dependencies of Go projects. bazel is a build tool that produces stable, reproducable builds. There is a bazel rule set for Go projects, including an automatic build-file generator, gazelle, that generates Bazel build…
Xjs
  • 33
  • 5
3
votes
0 answers

How can I disable DEP for a single application (32 bit app, Win 7x64)

Adobe Acrobat Pro 9.5, despite a couple of hundred of service pack fixes, still cannot scan without crashing. It's a well-known issue, and the solution is to disable DEP because Acrobat is buggy (or has intentional self-modifying code, but I hope…
Dave
  • 1,521
  • 17
  • 31
3
votes
2 answers

CEF (Chromium Embedded Framework) vs DEP (Data Execution Prevention)

I'm using DCEF3 (https://code.google.com/p/dcef3/) with Delphi 7. The CEF version, embedded with the DCEF, is 3.1547.1412. The Problem On machines with Windows 2008 R2, some times when my application loads, it crashes with an event of type BEX. I…
Beto Neto
  • 3,962
  • 7
  • 47
  • 81
3
votes
5 answers

"Data Execution Prevention" kills (VS2008) local ASP.Net Development Server (aka Cassini) on Vista 64

Occasionally, I find that while debugging an ASP.Net application (written in visual studio 2008, running on Vista 64-bit) the local ASP.Net development server (i.e. 'Cassini') stops responding. A message often comes up telling me that "Data…
Leon Bambrick
  • 26,009
  • 9
  • 51
  • 75
2
votes
1 answer

Why execution of a portion of code loaded from an external file is not halted by DEP?

I've harnessed a project released on internet a long time ago. Here comes the details, all irrelevant things being stripped off for sake of concision and clarity. A binary file whose content is descibed below HEX DUMP: 55 89 E5 83 EC 08 C7 45 FC 00…
menjaraz
  • 7,551
  • 4
  • 41
  • 81
2
votes
1 answer

Risks of RWX memory pages

After getting negative comments on this answer - can i implement counter in the .text area without using registers?, I performed a little investigation, trying to understand if RWX memory pages are really non-usual and rare thing, or every popular…
Abyx
  • 12,345
  • 5
  • 44
  • 76
2
votes
2 answers

Is the ATL incompatibility with DEP fixable?

ATL uses thunks to manage callbacks for windows, and apparently it needs to allow for data execution. Microsoft says: Note that system DEP policy can override, and having DEP AlwaysOn will disable ATL thunk emulation, regardless of the…
user541686
  • 205,094
  • 128
  • 528
  • 886
2
votes
1 answer

GetProcessDEPPolicy says permanent but it's not

I have a 32-bit executable running on Windows 10. The System DEP is set to OptIn. I call GetProcessDEPPolicy and it returns: dwFlags == 0 // DEP is disabled bPermanent == 184 // which means TRUE, so permanent This means I shouldn't be able to…
donaddon
  • 413
  • 2
  • 13
2
votes
1 answer

Executable stack: flags

I am doing a return2libc attack on my Ubuntu 18.04, X86_64 machine. For this, i compiled a simple C program with -z execstack to disable the executable stack flag. Now looking at the flags of the GNU_STACK region (via readelf -a) i get the RWE…
AndiYo
  • 43
  • 6
1
2
3 4 5 6 7