The Taming of the Stack: Isolating Stack Data from Memory Errors

À propos
Confidentialité
Mentions légales

Graph Chatbot

Publications associées (4)

Page 1 sur 1

Exploiting android’s hardened memory allocator

Mathias Josef Payer, Marcel Busch

Most memory corruptions occur on the heap. To harden userspace applications and prevent heap-based exploitation, Google has developed Scudo. Since Android 11, Scudo has replaced jemalloc as the default heap implementation for all native code on Android. Sc ...

USENIX Association2024

SoK: Shining Light on Shadow Stacks

Mathias Josef Payer

Control-Flow Hijacking attacks are the dominant attack vector against C/C++ programs. Control-Flow Integrity (CFI) solutions mitigate these attacks on the forward edge, i.e., indirect calls through function pointers and virtual calls. Protecting the backwa ...

IEEE COMPUTER SOC2019

CFIXX: Object Type Integrity for C++

Mathias Josef Payer

C++ relies on object type information for dynamic dispatch and casting. The association of type information to an object is implemented via the virtual table pointer, which is stored in the object itself. As C++ has neither memory nor type safety, adversar ...

The Internet Society2018

Improving systems software security through program analysis and instrumentation

Volodymyr Kuznetsov

Security and reliability bugs are prevalent in systems software. Systems code is often written in low-level languages like C/C++, which offer many benefits but also delegate memory management and type safety to programmers. This invites bugs that cause cra ...

EPFL2016