5 ms·
W^X policy??
by retox 11y ago
W^X policy??
- lawl 11y agohttps://en.wikipedia.org/wiki/W%5EX https://en.wikipedia.org/wiki/W%5EX Also known as DEP under Windows: https://en.wikipedia.org/wiki/Data_Execution_Prevention https://en.wikipedia.org/wiki/Data_Execution_Prevention Or more general: NX: https://en.wikipedia.org/wiki/NX_bit https://en.wikipedia.org/wiki/NX_bit There should probably be a definitive name for this.
- retox 11y agoThank you. [edit] I understand HN prefers to use the original headline when linking and the source has no need to explain the term but I do so enjoy learning new things from HN.
- deleted 11y ago[deleted]
- brohee 11y agoWritable exclusive OR eXecutable policy, applied to memory pages it makes memory safety bugs a lot harder to exploit, as an attacker can't simply load an executable payload (typically, shellcode) in the address space of the exploited program and jump to it...
- JoachimS 11y agoJust to emphasize (be picky): Logically it is exclusive or (XOR), not inclusive (OR). That is either write or execute, but not both.
- Avernar 11y agoToo be really picky, logically it's NAND. Not writable and not executable is valid. :)
- bentcorner 11y ago> as an attacker can't simply load an executable payload (typically, shellcode) in the address space of the exploited program and jump to it... Very interesting read on how this works in practice: https://www.corelan.be/index.php/2010/06/16/exploit-writing-tutorial-part-10-chaining-dep-with-rop-the-rubikstm-cube/ https://www.corelan.be/index.php/2010/06/16/exploit-writing-...