Bug 106734

Summary: Harden code pointers in the register file
Product: WebKit Reporter: Oliver Hunt <oliver>
Component: JavaScriptCoreAssignee: Nobody <webkit-unassigned>
Status: NEW    
Severity: Normal CC: fpizlo, ggaren, ike
Priority: P2    
Version: 528+ (Nightly build)   
Hardware: Unspecified   
OS: Unspecified   

Oliver Hunt
Reported 2013-01-12 21:02:47 PST
We should experiment with the possibility of applying a random mask to the return slot in the register file's call frame as a way of making rop from jit, or address leaking more difficult.
Attachments
Note You need to log in before you can comment on or make changes to this bug.