3 ms·

Is there any work on ASLR for quasi-static binaries? So you have no external linking (good for distribution and unsurprising dependencies), but still relocate a

• tedunangst 10y ago
  -fPIE? Works on OpenBSD.
• viraptor 10y ago
  In stali, or in general? For stali there's a slightly confusing FAQ entry: http://sta.li/faq http://sta.li/faq / "Aren’t statically linked executables less secure?" > it is simple to use position-independent code in static executables and (assuming a modern kernel that supports address randomization for executables) fully position-independent executables are easily created on all modern operating systems. [...] Thus we consider this as an issue with low impact and this is not a real focus for us. So I don't know if they do it or not. If I read it correctly, they just ignore something they say is easy to do. But in general, as mentioned, there's normally nothing that prevents you from compiling PIE C code even if you use -static.
  • Retr0spectrum 10y ago
    I'm assuming that even with PIE, the relative positioning of the statically linked libraries is constant. That means you only need a single address leak to be able to ROP to anywhere.
    • viraptor 10y ago
      That's how I understand it as well (it's a single rel/ro segment). But then again, in most cases you only need any address anyway. Rop gadgets are everywhere...