Pro@mander.xyz to Programming@programming.dev · 15 days agoConnect and corrupt: C++ coroutines prone to code-reuse attack despite control flow integritycispa.deexternal-linkmessage-square5fedilinkarrow-up140arrow-down10
arrow-up140arrow-down1external-linkConnect and corrupt: C++ coroutines prone to code-reuse attack despite control flow integritycispa.dePro@mander.xyz to Programming@programming.dev · 15 days agomessage-square5fedilink
minus-squareTehPers@beehaw.orglinkfedilinkEnglisharrow-up3·14 days agoIt seems like the more interesting thing is bypassing CFI protections by abusing coroutines to jump around instead of inserting jumps to other functions.
It seems like the more interesting thing is bypassing CFI protections by abusing coroutines to jump around instead of inserting jumps to other functions.