3 ms·
If I can use a data race to corrupt a jump target, I've done most of the work I need to for any classic memory-safety security vuln. Go makes this much harder
by morelisp 3y ago
If I can use a data race to corrupt a jump target, I've done most of the work I need to for any classic memory-safety security vuln.
Go makes this much harder to do than C/C++, especially as it relates to e.g. mishandling user input, but not impossible, even without CGo or unsafe.
- pa7ch 3y agoI've never seen a single control flow hijack PoC from go data races even in a code golf scenario. I've always wondered if this is possible but I don't think it is. Care to share an example?