This isn't fixed until the compilers are
This isn't fixed until the compilers are
Posted Jul 4, 2017 3:15 UTC (Tue) by Aaron1011 (guest, #115128)In reply to: This isn't fixed until the compilers are by dlang
Parent article: Ripples from Stack Clash
> If there is a way to crash/corrupt your machine from a sequence of instructions, attackers will use asm() to insert those specific instructions
Stack Clash isn't a vulnerability in the kernel - it's a vulnerability that allows an attacker to gain control over a process that they wouldn't normally be able to (e.g. a guid/suid'd program like 'sudo'). The kernel change simply makes it less likely for this kind of vulnerability to be exploited (though stack probing is needed to truly fix the issue).
