3 ms·
Yes. It means that you can’t use a write primitive to simply modify an already executable page.
by bpye 4y ago
Yes. It means that you can’t use a write primitive to simply modify an already executable page.
- lisper 4y agoHow does that help?
- remexre 4y agoIt means an attacker with an arbitrary-write vuln needs to be able to target a page as the JITted code is being written to it, rather than being able to target any existing page with code in it.
- Dylan16807 4y agoAnd since javascript is so focused on a single thread, it's easy to make sure it's not even running at the same time your JIT code is doing those writes.