2 ms·
MTE is good to have, but it only reduces the probability of successful attacks (by a factor of 16). If the process is allowed to segfault multiple times attacke
by lifthrasiir 3y ago
MTE is good to have, but it only reduces the probability of successful attacks (by a factor of 16). If the process is allowed to segfault multiple times attackers have a good chance to work around MTE.
- ignoramous 3y agoThat's a general limitation with tagged pointers, I belive? Have you come across demonstrations of such exploits?