3 ms·
This seems like protection that would not be needed if everything were written in Rust - or maybe even some other languages that aren't C.
by phkahler 5y ago
This seems like protection that would not be needed if everything were written in Rust - or maybe even some other languages that aren't C.
- saagarjha 5y agoCorrect, but given that everything is not written in Rust and will not be anytime soon perhaps you can see the benefits of having this kind of CFI around.
- phkahler 5y ago>> Correct, but given that everything is not written in Rust and will not be anytime soon perhaps you can see the benefits of having this kind of CFI around. Oh I can. It's just really frustrating that they are adding ISA features to make up for the poor security offered by the dominant language. That's not a critique of C either - I understand the history and the fact that it's taken decades to discover the flaws of it and define a better way. I just get frustrated seeing patch after patch after hardware patch to fix a broken design. This one almost seems frivolous given the NX bit, but I'm sure one could craft something to exploit it somehow.
- snovv_crash 5y agoEven in rust you can have compiler bugs.
- rurban 5y agoAbsolutely not. Rust does not help you against IBT-like attacks. see eg https://github.com/movrsprbp/rust-spectre https://github.com/movrsprbp/rust-spectre this is a hardware bug, and can be fixed in HW or compilers.