|
@gannimo | |||||
|
This policy enforces a neat property I'd call set integrity. Attackers can locate and still compromise pointer stores (or indexes into pointer arrays). Attacks will be harder but not impossible, becoming more program dependant. (Disclaimer: I only skimmed b/c mobile)
|
||||||
|
||||||
|
Matt Miller
@epakskape
|
19. srp |
|
Interested in memory safety exploits & mitigations?
Here's a new research paper that explores an ISA extension which tries to make it more difficult to corrupt pointers.
All feedback on the security efficacy and overall design is appreciated :)
microsoft.com/en-us/research…
|
||
|
|
||