News for hackers. Stuff that matters.
Re:“Most serious” Linux privilege-escalation bug ever is und... by simcop2387 on Thursday October 20, 2016 @08:00PM (#12757199)
I know what everything else is, but what is CFI? An attempt at googling came up with results that didn't make any sense right away.
Re:“Most serious” Linux privilege-escalation bug ever is und... by hannob on Thursday October 20, 2016 @08:13PM (#12757265)
Control-Flow Integrity. It's a bit of the new hotness in exploit mitigation, however it's quite complicated and there are various solutions that have different advantages and disadvantages. clang docs: http://clang.llvm.org/docs/ControlFlowIntegrity.html
Re:“Most serious” Linux privilege-escalation bug ever is und... by tptacek on Thursday October 20, 2016 @10:21PM (#12757742)
Shorter CFI: when doing codegen for calls through function pointers (which will involve indirect calls through registers), emit extra code to make sure the register being jumped to is a legit function, thus breaking ROP payloads.

There's more to it, but that's the flavor of it.