> And the somewhat unique situation that the code can leak information back, which here allowed for the bypass of stack cookies Information leaks are by far th

> And the somewhat unique situation that the code can leak information back, which here allowed for the bypass of stack cookies Information leaks are by far the most important class of bugs in modern exploitation. They're really common, and they generally nullify ASLR completely. The Array.reduceRight vulnerability in Firefox is a fantastic example of this: https://bugzilla.mozilla.org/show_bug.cgi?id=664009 https://bugzilla.mozilla.org/show_bug.cgi?id=664009 That bug can be used to leak info about JS objects, which gives you enough information to circumvent ASLR. The same bug also allows code execution using that info.