It doesn't even protect return addresses, just indirect calls... so it does nothing to stop ROP.
-
-
in your expert opinion what does scripts/gcc-plugins/rap_plugin/rap_ret_pass.c do? oopsie... you goofed up again ;)
1 reply 0 retweets 0 likes -
Oh, you decided to stop nerfing RAP in the public release? Good for you! Because that file magically appeared in 4.9 and wasn't in 4.8.
2 replies 0 retweets 1 like -
It is in 4.8.17, and 4.7.10, and 4.6.5 (July last year), you're really up for complaining about whatever right?
2 replies 0 retweets 0 likes -
Replying to @_pablosole_ @paxteam and
No it isn't. They announced this 3 months ago. https://grsecurity.net/rap_announce2.php … $ grep rap_ret_pass grsecurity-3.1-4.8.17-201701151620.patch $
2 replies 0 retweets 0 likes -
I meant RAP in general, the ret pass was not there (was not even announced at that date), but the rap_fptr_pass has been there for a while
1 reply 0 retweets 0 likes -
Replying to @_pablosole_ @paxteam and
We were explicitly and clearly talking about the ret pass, which *was* announced (for the paid version only): https://grsecurity.net/rap_announce.php …
1 reply 0 retweets 0 likes -
Replying to @marcan42 @_pablosole_ and
more lies ;). do you understand the difference between 'probabilistic' and 'deterministic'?
1 reply 0 retweets 0 likes -
Replying to @paxteam @_pablosole_ and
Protip: you don't get to claim something was "always going to be released" after you release it without ever announcing that.
3 replies 0 retweets 0 likes -
My point is until February the public RAP release had *no* return address protection and the private one *did*.
1 reply 0 retweets 0 likes
I don't care what *kind* of protection and I don't care what plans you did or did not have which you never shared.
-
-
But hey, keep using the word "lies". It's working great for Trump, maybe you can be president too :-)
0 replies 0 retweets 0 likesThanks. Twitter will use this to make your timeline better. UndoUndo
-
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.