3 ms·
Security: It still won't do execute-only and true read-only memory. We've had true read-only for ages now on x86, and just got execute-only. You need these: rw
by tropo 10y ago
Security:
It still won't do execute-only and true read-only memory. We've had true read-only for ages now on x86, and just got execute-only. You need these: rw- r-- --x
It still has poor support for ASLR, especially the limited-MMU variants. Even the most limited version should be able to require that the uppermost address bits be something randomish, even if it's only a per-priv-level random cookie.
- unwind 10y agoHere, ASLR is "Address space layout randomization" (https://en.wikipedia.org/wiki/Address_space_layout_randomization https://en.wikipedia.org/wiki/Address_space_layout_randomiza...), a technique to protect from buffer overflows and other such exploits where an attacker makes guesses about where things are in memory part of the attack.