3 ms·
I don't think that helps much. OpenBSD already only allows syscalls originating out of the libc .text section, so whether the trap itself comes from a syscall
by monocasa 3y ago
I don't think that helps much. OpenBSD already only allows syscalls originating out of the libc .text section, so whether the trap itself comes from a syscall instruction or some other trap mechanism doesn't really improve security AFAICT.
- saagarjha 3y agoYeah but it sounds super cool doesn’t it!
- monocasa 3y agoEvery time I've seen a dev team go down that road, it's come with rather unfortunate unintended side effects. https://devblogs.microsoft.com/oldnewthing/20041215-00/?p=37003 https://devblogs.microsoft.com/oldnewthing/20041215-00/?p=37...
- saagarjha 3y agoYeah but think of the attacks I thought of in the shower that it mitigates