5 ms·
They changed it in Windows 10 (RS1 IIRC)[1]. [1] http://www.alex-ionescu.com/?p=323 http://www.alex-ionescu.com/?p=323
by ryuuchin 9y ago
They changed it in Windows 10 (RS1 IIRC)[1].
[1] http://www.alex-ionescu.com/?p=323 http://www.alex-ionescu.com/?p=323
- caf 9y agoThe tl;dr is that they're still using the self-referential page table trick, however the PTE_BASE is now randomised at runtime with dynamic fixups.
- amluto 9y agoIf an attacker can’t find it by probing the smallish number of choices using one of many MMU layout fixes, I’d be quite surprised.