3

Most defense techniques against ROP revolves around randomization, such as ASLR.

If I mark all regions of memory, other than the code segment, non-executable, will this defeat ROP?

8

No. Actually, most RoP attacks make use of existing codes (former return-into-libc-attacks). So, the RoP gadgets are snippets of existing code and have to be executable.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.