I have already packaged an earlier version, and plan to package and upload (for woody) Lucent/Bell Labs's "libsafe" which was has now been released under LGPL. libsafe is an ldso-preload library that filters calls to 'unsafe' string manipulation functions, and attempts to prevent stack-overflow attacks. The source and description are at http://www.bell-labs.com/org/11356/libsafe.html