Exploit Methods/Reused code chunks

From Linux Kernel Security Subsystem
Revision as of 23:25, 4 November 2015 by KeesCook (talk | contribs) (Created page with "= Details = This is more generally knows as Return Oriented Programming (ROP) or Jump Oriented Programming (JOP), but ultimately boils down to using the kernel's own executabl...")
(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)
Jump to navigation Jump to search

Details

This is more generally knows as Return Oriented Programming (ROP) or Jump Oriented Programming (JOP), but ultimately boils down to using the kernel's own executable memory to build a chain of gadgets in order to perform the attacker's exploit.

Examples

Mitigations

  • compiler instrumentation for Control Flow Integrity (CFI)
  • Return Address Protection, Indirect Control Transfer Protection (e.g. RAP)
Retrieved from "http://kernsec.org/wiki/index.php?title=Exploit_Methods/Reused_code_chunks&oldid=3742"