Re:Glibc getaddrinfo stack-based buffer overflow
by gpderetta on Thursday February 18, 2016 @03:18AM
(#11124411)
Sure, but these are (very effective) mitigation techniques, but still do not guarantee memory safety.
You are right that Heartbleed is not a memory safety issue, I should have been more careful. I just wanted an example of an exploit that doesn't need to escape the process boundary to cause damage.
You are right that Heartbleed is not a memory safety issue, I should have been more careful. I just wanted an example of an exploit that doesn't need to escape the process boundary to cause damage.