What's Coming in Go 1.15

Re:What's Coming in Go 1.15 by EE84M3i on Wednesday May 13, 2020 @02:35AM (#23164107)

>On Windows, Go 1.15 now generates executables that use address-space layout randomization (ASLR) by default. ASLR uses position-independent code to randomize the addresses of various data areas on startup, making it harder for attackers to predict target addresses and create memory-corruption exploits.

Impressive this is only landing for Windows now after PPP made a spectacle of the lack of ASLR back in 2013. http://pwning.net/2013/04/21/exploiting-a-go-binary/

[ Parent | on HN ]

Re:What's Coming in Go 1.15 by zxcmx on Thursday May 14, 2020 @07:19AM (#23178122)

Ehh I agree with you but I also haven't seen an "actual" exploit for a go memory corruption vulnerability outside of POCs.

Like I know it's possible with effort and maybe it was just lack of interest or adoption (like lets be fair its not a browser writing or pdf rendering engine type of language...) so while that situation was not great it never struck me as a burning problem with practical impact in the ecosystem either.

Interested in any pointers if possible.

[ Parent | on HN ]