2 ms·
Why is it more difficult for an attacker to change the code compared the JIT?
by metadat 3y ago
Why is it more difficult for an attacker to change the code compared the JIT?
- matheusmoreira 3y agoAttackers love overflowing buffers but since that memory is not executable they can't put code in there directly. The JIT compiler is almost always the only component which writes to executable pages so they need to somehow trick it into emitting the code they want. It's my understanding that JIT spray attacks are harder to develop.