lea noop

Posted Mar 2, 2025 20:23 UTC (Sun) by andy_shev (subscriber, #75870)
In reply to: lea noop by ushankar
Parent article: A hole in FineIBT protection

As far as I can see the -0x10 is the requiremet of the FineIBT calling convention (see cfi.h). I.o.w. it's expected. The idea is that the conditional jump is done into the guts of the lea instruction, which makes it's an illegal sequence (in case it is taken).