3 ms·
As I mention on his blog post, both of these tactics are inherently evil and can result in security vulnerabilities, since the attacker now can keep trying memo
by xpaulbettsx 17y ago
As I mention on his blog post, both of these tactics are inherently evil and can result in security vulnerabilities, since the attacker now can keep trying memory addresses until he succeeds, which defeats ASLR for one.
It will also turn an easy-to-debug SIGSEGV into a horrible-to-debug memory corruption; check out http://support.microsoft.com/kb/976038 http://support.microsoft.com/kb/976038 for an example. This bug made debugging large applications on x64 a real pain.