[Webkit-unassigned] [Bug 106734] New: Harden code pointers in the register file

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Sat Jan 12 21:00:58 PST 2013


https://bugs.webkit.org/show_bug.cgi?id=106734

           Summary: Harden code pointers in the register file
           Product: WebKit
           Version: 528+ (Nightly build)
          Platform: Unspecified
        OS/Version: Unspecified
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: JavaScriptCore
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: oliver at apple.com
                CC: ggaren at apple.com, ike at apple.com, fpizlo at apple.com


We should experiment with the possibility of applying a random mask to the return slot in the register file's call frame as a way of making rop from jit, or address leaking more difficult.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.



More information about the webkit-unassigned mailing list