4 ms·
CFI goes a long way towards defeating ROP
by quotemstr 7y ago
CFI goes a long way towards defeating ROP
- saagarjha 7y agoAre there any systems that implement widespread CFI for all binaries? The most I’ve seen is glibc’s endbr64 at the top of _start.
- rwmj 7y agoFedora 31 compiles everything with -fcf-protection. Of course it requires hardware support before it actually does anything, and there is a lot of missing support in the non-C toolchain and in certain packages. You can use "annocheck" to check if a particular binary is compiled with full control flow protection or not, eg: $ annocheck -v /usr/bin/ls [...] Hardened: /usr/bin/ls: PASS: Compiled with -fcf-protection.