Virtual Machines and Memory Protections
Posted Nov 22, 2006 19:18 UTC (Wed) by bluefoxicy
In reply to: Virtual Machines and Memory Protections
Parent article: Virtual Machines and Memory Protections
> Of course subverted code can now call this as well, but that's in general true of *any* means of allowing dynamically-generated code. If your code can do it as part of its normal operation, there's no way to statically tell if it's been subverted into doing it.
Exactly the point. Comment posted at http://lwn.net/Articles/210804/ goes into great detail about protecting against these attacks; but it all boils down to what you just said: If you can dynamically generate code, so can an attacker hijacking you.
to post comments)