3 ms·
Right, so it would actually have been hard to mess that up. The only platform where Firefox has limited ASLR is Linux, where PIE is disabled, due to issues wit
by gcp 10y ago
Right, so it would actually have been hard to mess that up.
The only platform where Firefox has limited ASLR is Linux, where PIE is disabled, due to issues with some desktop managers not detecting PIE executables are executable. So the default builds disable it for maximum compatibility. Distros like Debian and Fedora have fixed the bug on their side though, and just ship PIE Firefox executables.
The graph mentions Safari, so you'd think Mac OS X. But AFAIK the ASLR implementation just works on Mac OS X?
So I have no idea what the graph is supposed to mean.
- glandium 10y agoFor completeness, Distros didn't actually fix the issue, they have much less to care about it: When you install a distro package, you get the application icon in your desktop environment. You don't when you download a firefox tarball, and unpack it.