[PATCH] Insert random noops to increase security against ROP attacks (llvm)

Chandler Carruth chandlerc at google.com
Mon Jan 5 19:19:47 PST 2015


On Mon, Jan 5, 2015 at 7:13 PM, PaX Team <pageexec at gmail.com> wrote:

> that's exactly what i'm wondering about: what is that class of attacks?
> blind ROP can discover gadgets remotely without knowing the exact code
> content.
>

I'm not a security expert, but I would imagine that blind ROP is somewhat
harder / more difficult / more expensive than ROP. Certainly all the
abstracts seem to indicate this is the case. Provided that is the case, it
again seems like a reasonable tool to offer in the tool box.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.llvm.org/pipermail/llvm-commits/attachments/20150105/fa945178/attachment.html>


More information about the llvm-commits mailing list