3 ms·
If an attacker is able to write arbitrary code through to memory, they won't then be able to actually execute that code. It's a solid security enhancement.
by Diederich 11y ago
If an attacker is able to write arbitrary code through to memory, they won't then be able to actually execute that code.
It's a solid security enhancement.
- DarkLinkXXXX 11y agoForgive my naivete, isn't that feature provided by the operating system?
- JonathonW 11y agoIt is provided by the operating system, but you can't just naively enable it by default, especially in an application like Firefox (which has a JIT compiler for Javascript, and therefore needs to be aware of and able to manage which pages are writable and which pages are executable).
- neerdowell 11y agoSoftware has to play nice and not request WX pages. If they do, the OS does as its asked. See also, Theo de Raadt's recent comment on why OSes can't enforce W^X on userland (yet): https://marc.info/?l=openbsd-misc&m=145943630726937&w=2 https://marc.info/?l=openbsd-misc&m=145943630726937&w=2