Re:“Most serious” Linux privilege-escalation bug ever is und...
by simcop2387 on Thursday October 20, 2016 @08:00PM
(#12757199)
I know what everything else is, but what is CFI? An attempt at googling came up with results that didn't make any sense right away.
[ Parent
| on HN ]
Re:“Most serious” Linux privilege-escalation bug ever is und...
by hannob on Thursday October 20, 2016 @08:13PM
(#12757265)
Control-Flow Integrity.
It's a bit of the new hotness in exploit mitigation, however it's quite complicated and there are various solutions that have different advantages and disadvantages.
clang docs:
http://clang.llvm.org/docs/ControlFlowIntegrity.html
Re:“Most serious” Linux privilege-escalation bug ever is und...
by tptacek on Thursday October 20, 2016 @10:21PM
(#12757742)
Shorter CFI: when doing codegen for calls through function pointers (which will involve indirect calls through registers), emit extra code to make sure the register being jumped to is a legit function, thus breaking ROP payloads.
There's more to it, but that's the flavor of it.