diff options
| author |   deraadt <deraadt@openbsd.org> | 2019-06-01 22:42:18 +0000 |
|---|---|---|
| committer | deraadt <deraadt@openbsd.org> | 2019-06-01 22:42:18 +0000 |
| commit | a3c072261450a5ba71c3ee7e4ecfa3c8da16c9e8 (patch) | |
| tree | 92d43d58ec980231bea42ca3aeea95c1a1ae9879 /lib/libc/stdlib | |
| parent | Update regression test for a maximum sizeof(int32_t) length octets. (diff) | |
| download | wireguard-openbsd-a3c072261450a5ba71c3ee7e4ecfa3c8da16c9e8.tar.xz wireguard-openbsd-a3c072261450a5ba71c3ee7e4ecfa3c8da16c9e8.zip | |
Refactor the MAP_STACK feature, and introduce another similar variation:
Lookup the address that a syscall instruction is executed from, and kill
the process if that page is writeable. This brings an aspect of W^X
behaviour to W|X mappings (in JITs not yet adapted to W^X). The goal is
to remove simple attack methods and force use of ret2libc or other more
complicated means.
ok kettenis stefan visa
Diffstat (limited to 'lib/libc/stdlib')
0 files changed, 0 insertions, 0 deletions