News for hackers. Stuff that matters.

A comment on JIT-Less V8. Parent comment

Re:JIT-Less V8 by hashseed on Wednesday March 13, 2019 @12:46PM (#19380547)
V8 already employs W^X, i.e. memory pages allocated for V8's heap are either writable or executable, but not both at the same time.
[ Parent | on HN ]
Re:JIT-Less V8 by MikeHolman on Wednesday March 13, 2019 @03:45PM (#19382889)
By allowing JIT at all, a small ROP chain can call VirtualProtect to make a larger payload executable.

Sure you can do everything with ROP, but it is less convenient (and Intel CET might eventually make ROP attacks actually hard).

[ Parent | on HN ]
Re:JIT-Less V8 by gok on Wednesday March 13, 2019 @12:53PM (#19380664)
Well, except for WebAssembly. But even then, it's still fundamentally possible to hijack control of whatever changes the pages from RW to RX.
[ Parent | on HN ]