From mboxrd@z Thu Jan 1 00:00:00 1970 X-Spam-Checker-Version: SpamAssassin 3.4.4 (2020-01-24) on polar.synack.me X-Spam-Level: X-Spam-Status: No, score=-1.9 required=5.0 tests=BAYES_00,XPRIO autolearn=ham autolearn_force=no version=3.4.4 X-Google-Thread: 103376,5bc4be576204aa20,start X-Google-Attributes: gid103376,public X-Google-Language: ENGLISH,ASCII-7-bit Path: g2news1.google.com!news3.google.com!border1.nntp.dca.giganews.com!nntp.giganews.com!newscon06.news.prodigy.com!prodigy.net!newsmst01b.news.prodigy.com!prodigy.com!postmaster.news.prodigy.com!newssvr25.news.prodigy.net.POSTED!4988f22a!not-for-mail From: Newsgroups: comp.lang.ada Subject: Buffer overflow Article - CACM X-Priority: 3 X-MSMail-Priority: Normal X-Newsreader: Microsoft Outlook Express 6.00.2800.1437 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1441 Message-ID: NNTP-Posting-Host: 71.129.220.59 X-Complaints-To: abuse@prodigy.net X-Trace: newssvr25.news.prodigy.net 1131858842 ST000 71.129.220.59 (Sun, 13 Nov 2005 00:14:02 EST) NNTP-Posting-Date: Sun, 13 Nov 2005 00:14:02 EST Organization: SBC http://yahoo.sbc.com X-UserInfo1: FKPGW^WETZSMB_DX]BCBNWX@RJ_XPDLMN@GZ_GYO^RR@ETUCCNSKQFCY@TXDX_WHSVB]ZEJLSNY\^J[CUVSA_QLFC^RQHUPH[P[NRWCCMLSNPOD_ESALHUK@TDFUZHBLJ\XGKL^NXA\EVHSP[D_C^B_^JCX^W]CHBAX]POG@SSAZQ\LE[DCNMUPG_VSC@VJM Date: Sun, 13 Nov 2005 05:14:02 GMT Xref: g2news1.google.com comp.lang.ada:6354 Date: 2005-11-13T05:14:02+00:00 List-Id: There is an interesting article in the current issue of the Communications of the ACM (Vol 48, No 11, page 50) about preventing stack buffer overflow attacks. The authors, Kuperman, Brodley, Ozdoganoglu, Viuakumar, and Jalote, write as if they have never heard of Ada. In one paragraph, they criticize C as being vulnerable to such attacks and then dismiss Pascal as being unable to address low-level issues. As I read their solution, it became clear that simply choosing Ada for their development language would solve the vast majority of their concerns. This kind of article appears every now and then. The authors of these articles write as if it is necessary to improve C or invent new tools when all they really have to do is discover Ada. Richard Riehle