A return-oriented programming defense from OpenBSD

Posted Aug 30, 2017 20:15 UTC (Wed) by mjthayer (guest, #39183)
Parent article: A return-oriented programming defense from OpenBSD

I wondered recently about how useful copying the return address to a local variable at the bottom (address-wise) of the frame and comparing them before returning would be as a defence technique.

A return-oriented programming defense from OpenBSD

Posted Aug 31, 2017 12:00 UTC (Thu) by sorokin (guest, #88478) [Link] (1 responses)

This still allows overwriting of the return address of the caller of the current function.

A return-oriented programming defense from OpenBSD

Posted Aug 31, 2017 12:07 UTC (Thu) by mjthayer (guest, #39183) [Link]

> This still allows overwriting of the return address of the caller of the current function.

Yes, I realise that. It is at least harder though as you have to avoid overwriting your own in the process.