It doesn't even protect return addresses, just indirect calls... so it does nothing to stop ROP.
-
-
in your expert opinion what does scripts/gcc-plugins/rap_plugin/rap_ret_pass.c do? oopsie... you goofed up again ;)
1 reply 0 retweets 0 likes -
Oh, you decided to stop nerfing RAP in the public release? Good for you! Because that file magically appeared in 4.9 and wasn't in 4.8.
2 replies 0 retweets 1 like -
It is in 4.8.17, and 4.7.10, and 4.6.5 (July last year), you're really up for complaining about whatever right?
2 replies 0 retweets 0 likes -
Replying to @_pablosole_ @paxteam and
No it isn't. They announced this 3 months ago. https://grsecurity.net/rap_announce2.php … $ grep rap_ret_pass grsecurity-3.1-4.8.17-201701151620.patch $
2 replies 0 retweets 0 likes -
I meant RAP in general, the ret pass was not there (was not even announced at that date), but the rap_fptr_pass has been there for a while
1 reply 0 retweets 0 likes -
Replying to @_pablosole_ @paxteam and
We were explicitly and clearly talking about the ret pass, which *was* announced (for the paid version only): https://grsecurity.net/rap_announce.php …
1 reply 0 retweets 0 likes -
Replying to @marcan42 @_pablosole_ and
more lies ;). do you understand the difference between 'probabilistic' and 'deterministic'?
1 reply 0 retweets 0 likes -
Replying to @paxteam @_pablosole_ and
Protip: you don't get to claim something was "always going to be released" after you release it without ever announcing that.
3 replies 0 retweets 0 likes -
not entirely true, it was announced: https://grsecurity.net/rap_announce2.php …
1 reply 0 retweets 0 likes
Replying to @dev_console @paxteam and
It was announced *when* it was released. Not in advance. Also I already linked to that.
9:14 PM - 29 Apr 2017
0 replies
0 retweets
0 likes
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.