First page Back Continue Last page Summary Graphics
Stack smashes must work
Process stack top at 0xc0000000
'jail' puts stack top at 0xa0000000
The reason that 'honeypot' mode locates the process stack in the same place that it is on the host is that stack smash attacks must work. If they didn't, UML would not be useful as a honeypot because it would be impossible (or at least difficult) to break into them.