A Tour Beyond BIOS - Mitigate Buffer Overflow in
  • A Tour Beyond BIOS - Security Enhancement to Mitigate Buffer Overflow in UEFI
  • Executive Summary
  • Stack Canaries
    • Stack Check Support in Microsoft Visual Studio
    • Stack Check Support in GCC
    • Enable Stack Check in EDK II
    • Future work
  • Data Execution Protection
    • DEP in X86 Processor
    • DEP in UEFI specification
    • Enable DEP in EDK II
    • Future work
  • Address Space Layout Randomization
    • ASLR in Windows
    • ASLR in *nix
    • ASLR requirement in UEFI firmware
    • Enable ASLR for UEFI in EDK II
    • Enable ASLR for SMM in EDK II
    • Future work
  • Additional Overflow Detection
    • Stack Overflow Detection
    • Heap Management in EDKII
    • Heap Overflow Detection (for Page)
    • Heap Overflow Detection (for Pool)
    • NULL Pointer Protection in EDK II
    • Read-only page table
    • Limitation
    • Compatibility Consideration
    • Call for action
    • Future work
  • Summary
    • Policy Control
  • References
Powered by GitBook
On this page

Was this helpful?

  1. Stack Canaries

Stack Check Support in Microsoft Visual Studio

PreviousStack CanariesNextStack Check Support in GCC

Last updated 4 years ago

Was this helpful?

Microsoft Visual Studio supports a stack guard function. “Compiler Security Checks In Depth” [MSVC] [1] introduces the detail on how it works. There are 2 compiler options related:/GS and /RTC.

/GS[MSVC_GS] [2] is designed to detect some buffer overruns that overwrite a function's return address. It is similar to the stack guard feature described above.

/RTCs[MSVC_RTC] [3] is designed to put 2 tags around (before and after) all individual buffers allocated on the stack. Therefore, both overruns and underflows can be caught.

See figure 1-3 Microsoft* Stack Check.

Figure 1-3 – Microsoft Stack Check

[1] [MSVC] Compiler Security Checks In Depth

[2] [MSVC_GS] /GS (Buffer Security Check)

[3] [MSVC_RTC] /RTC (Run-Time Error Checks)