22 ms·

I think OS level mitigations like ASLR (address space layout randomization) can help... What causes (and avoids) it in drivers can be reproduced/bypassed elsew

I think OS level mitigations like ASLR (address space layout randomization) can help... What causes (and avoids) it in drivers can be reproduced/bypassed elsewhere

usr1106 5y ago
ASLR might make exploits a more cumbersome to implement. But the PSP is a co-processor with full access to hardware. So it can read the kernel's memory maps and fully deterministically access whatever it wants to access.