3 ms·
Perhaps "strict" would have been a better word choice than "severe". It does seem that there's a very reasonable security concern about doing so from +w+x memo
by Reelin 7y ago
Perhaps "strict" would have been a better word choice than "severe".
It does seem that there's a very reasonable security concern about doing so from +w+x memory, or from non-PIE regions, or without first explicitly authorizing the calling range.
My question still stands regarding what the security concern of opt-in PIE -w+x code making direct syscalls is.
Edit: (Of course I do understand that the BSDs (unlike Linux) do not guarantee a stable syscall ABI and as such performing them directly is strictly a bad practice.)