3 ms·
From what I could understand from the document, isn't ASLR along with NX a formidable defence? We need an address for gadgets to execute, but with ASLR enabled
by neo_optimus 12y ago
From what I could understand from the document, isn't ASLR along with NX a formidable defence?
We need an address for gadgets to execute, but with ASLR enabled we cannot run these gadgets at all.
Can somebody elaborate on this?
- AgentME 12y agoIt's common for many libraries to not opt-in to ASLR (since it requires them to be compiled as position-independent), and I don't believe ASLR applies to the program's own code.