2 ms·
Sorry if this is a stupid question (I don't fully understand SASOS), but would an OS that does this make ROP chain exploitation easier?
by orthecreedence 13y ago
Sorry if this is a stupid question (I don't fully understand SASOS), but would an OS that does this make ROP chain exploitation easier?
- Danieru 13y agoIt should not. The exploit cannot access any more libraries or addresses compared to traditional layout. One bonus not mentioned in the article is context switches no longer need to flush the TLB (the MMU's cache which is indexed by virtual address). Thus you don't lose the cache entries for shared libraries or kernel space.