3 ms·

Good question. If I had to bet I'd say something like half of the 70% would be prevented. Yeah it wouldn't really help with lifetime issues or type confusion bu

Good question. If I had to bet I'd say something like half of the 70% would be prevented. Yeah it wouldn't really help with lifetime issues or type confusion but a huge proportion of that 70% is simple out-of-bounds memory accesses. But don't forget lots of open source code is written in C and this barely helps there.

gw2 2y ago
> something like half of the 70% would be prevented Sure, but the other half are use-after-frees and those would not be exploitable anyway because of CFI and shadow stacks.
- IshKebab 2y ago
  That is a very bold claim!
  - gw2 2y ago
    Have a look at this repo: https://github.com/trailofbits/clang-cfi-showcase https://github.com/trailofbits/clang-cfi-showcase