OpenBSD system-call-origin verification

Re:OpenBSD system-call-origin verification by throwaway2048 on Sunday December 22, 2019 @07:19PM (#21860620)

Should be noted, that by default on OpenBSD, an RWX page is impossible, mprotect() will fail and the process will get killed trying.

[ Parent | on HN ]

Re:OpenBSD system-call-origin verification by saagarjha on Sunday December 22, 2019 @07:22PM (#21860637)

Surely there is an “out” for JITs that have not yet adopted W^X?

[ Parent | on HN ]

Re:OpenBSD system-call-origin verification by tedunangst on Sunday December 22, 2019 @07:25PM (#21860649)

An opt in actually, to request looser checks.

[ Parent | on HN ]

Re:OpenBSD system-call-origin verification by lostmsu on Sunday December 22, 2019 @08:00PM (#21860764)

Can't you make page temporarily RW, JIT, then switch back to RX?

[ Parent | on HN ]

Re:OpenBSD system-call-origin verification by saagarjha on Sunday December 22, 2019 @08:24PM (#21860845)

You can, but the application needs to support this.

[ Parent | on HN ]