Interesting technique by Todd Mortimer to reduce the number of gadgets on x86 even further: marc.info/?l=openbsd-tech&m=15

Nice! Todd Mortimer has committed his patch for into -current.

"This change removes about 3% of total gadgets from the kernel, but about 6% of unique gadgets."

marc.info/?l=openbsd-cvs&m=151

Follow-up x86 "ROP friendly" gadget reduction framework for , which can be extended. Impressive work by Todd Mortimer! 😎 marc.info/?l=openbsd-cvs&m=152

Follow

Todd Mortimer just landed his mitigation work (aka -fret-protector) into -current, and enabled by default.

marc.info/?l=openbsd-cvs&m=152

"In this way RETGUARD is an improved stack protector, since the cookies are per-function."

"In the kernel, this has the effect of removing approximately 50% of total gadgets, and 15% of unique ROP gadgets compared to the 6.3 release kernel."

😎

Sign in to participate in the conversation
Mastodon

Server run by the main developers of the project 🐘 It is not focused on any particular niche interest - everyone is welcome as long as you follow our code of conduct!