3 ms·
W^X isn't a solution for all memory corruption bugs. Only some. What this paper describes is called ROP (return oriented programming). Theo has a different p
by admax88q 10y ago
W^X isn't a solution for all memory corruption bugs. Only some.
What this paper describes is called ROP (return oriented programming). Theo has a different patch in OpenBSD to help mitigate that by re-linking the libraries at system startup, randomizing the location of most gadgets.
- cyphar 10y ago> What this paper describes is called ROP (return oriented programming). Theo has a different patch in OpenBSD to help mitigate that by re-linking the libraries at system startup, randomizing the location of most gadgets. That's quite clever. By relinking I'm assuming that includes randomisation of the library objects? But that probably doesn't protect you if the program has a memory disclosure bug.