3 ms·
I'm no expert but I believe in wasm memory and code are separate.
by postalrat 7y ago
I'm no expert but I believe in wasm memory and code are separate.
- pjmlp 7y agoYes it follows Harvard architecture, still you can produce exploits by corrupting memory, no need to rewrite code, it just becomes harder to achieve them. Basically by corrupting memory, you can achieve that the executing path changes and what was false is now true, thus influencing the outcome of what gets called and their parameters, without having to change any byte of the code.