2 ms·
Relevant talk on the motivation for printf-programming: https://www.usenix.org/conference/usenixsecurity15/technical-sessions/presentation/carlini#:~:text=Cont
by mjburgess 6y ago
Relevant talk on the motivation for printf-programming:
https://www.usenix.org/conference/usenixsecurity15/technical-sessions/presentation/carlini#:~:text=Control%2DFlow%20Bending%3A%20On%20the%20Effectiveness%20of%20Control%2DFlow%20Integrity,-Authors%3A&text=Control%2DFlow%20Integrity%20(CFI),is%20believed%20to%20be%20secure https://www.usenix.org/conference/usenixsecurity15/technical....
Very interesting. Roughly, that the existence of Turing-complete functions within programs creates a fundamental vulnerability that even rigid control over the control flow of a program cannot avoid.