4 ms·
The author of this program also wrote a paper about the technique it uses https://www.usenix.org/system/files/conference/usenixsecurity15/sec15-paper-carlini.p
by schoen 6y ago
The author of this program also wrote a paper about the technique it uses
https://www.usenix.org/system/files/conference/usenixsecurity15/sec15-paper-carlini.pdf https://www.usenix.org/system/files/conference/usenixsecurit...
describing it as a way of circumventing security measures that try to ensure that a particular control flow is followed in a compiled binary. In that case the security goal could be seen as forcing the compiled program to behave in a way close to what a human writer (or reader) would expect, while this method gets around that. So in that way, it could still be a problem, because the programmer appeared to write specialized program X but it can potentially be induced to behave like unrelated program Y at run time.