Tag Info

New answers tagged

4

The text segment is not typically randomized in ASLR implementations, and this is why Return-Oriented Programming (ROP) chains work. The idea is that the application's own code should be 'safe', so randomizing this memory space would be a waste of resources. ROP chains are about building a malicious payload using the application's own functionality. A ...


1

KASLR has gotten under heavy critic on the day it was released for Linux, and it has also been defeated on that very day. Spender at grSecurity has written a post about it (along with LWN comments) which I'll only summarize in a simplistic way. I highly encourage reading the original source. Address Space Layout Randomisation was originally applied to ...


1

KASLR is simply ASLR... applied to kernel space. Without KASLR the address space of the kernel is static. Any exploits using a kernel vulnerability will find it trivial to overwrite and control return addresses and the like, just like any exploit against a userspace vulnerability will find those tasks trivial without ASLR enabled. LWN has a nice article ...



Top 50 recent answers are included