The libsafe library protects a process against the exploitation of
buffer overflow vulnerabilities in process stacks. Libsafe works with
any existing pre-compiled executable and can be used transparently,
even on a system-wide basis. The method intercepts all calls to
library functions that are known to be vulnerable. A substitute
version of the corresponding function implements the original
functionality, but in a manner that ensures that any buffer overflows
are contained within the current stack frame. Libsafe has been shown
to detect several known attacks and can potentially prevent yet
unknown attacks. Experiments indicate that the performance overhead of
libsafe is negligible.

If libsafe is compiled on a system with libprelude installed, libsafe
will additionally emit a stack overflow alert to the Prelude Manager.
For more information about the Prelude Hybrid IDS, please see
http://www.prelude-ids.org

This package build with libprelude support.

• Serge A. Volkov
• Serhii Hlodin

• libsafe-prelude