4 ms·
Interesting how it's firing up a wasm instance to gain access to rwx memory. See also https://news.ycombinator.com/item?id=26737803 https://news.ycombinator.co
by est31 6y ago
Interesting how it's firing up a wasm instance to gain access to rwx memory.
See also https://news.ycombinator.com/item?id=26737803 https://news.ycombinator.com/item?id=26737803
- kevingadd 6y agoWe've had multiple exploit chains so far thanks to wasm in v8. IIRC someone developed a full exploit chain to get persistent root on chromebooks with a bug in v8's wasm implementation as the starting point, got a big bug bounty out of that one. That particular exploit also involved some holes in the chrome extensions security model (I believe they addressed them)