Re: [2/2] i386 ROP mitigation

2015-11-18 Thread Bernd Schmidt
On 11/16/2015 07:18 PM, Uros Bizjak wrote: On Fri, Nov 13, 2015 at 9:47 PM, Bernd Schmidt wrote: This adds a new -mmitigate-rop option to the i386 port. The idea is to mitigate against certain forms of attack called "return oriented programming" that some of our security folks are concerned abo

Re: [2/2] i386 ROP mitigation

2015-11-16 Thread Uros Bizjak
On Fri, Nov 13, 2015 at 9:47 PM, Bernd Schmidt wrote: > This adds a new -mmitigate-rop option to the i386 port. The idea is to > mitigate against certain forms of attack called "return oriented > programming" that some of our security folks are concerned about. The basic > idea is that the stack g

[2/2] i386 ROP mitigation

2015-11-13 Thread Bernd Schmidt
This adds a new -mmitigate-rop option to the i386 port. The idea is to mitigate against certain forms of attack called "return oriented programming" that some of our security folks are concerned about. The basic idea is that the stack gets smashed and then, just by chaining function returns and