Re: Memory protection and the push instruction (amd64)

2021-12-06 Thread Theo de Raadt
Theo de Raadt wrote: > Upon every system call entry, both the PC and SP are range-checked > against the object they point to, vaguely providing an addition kind of > MMU flag bit. This check hinders a variety of ROP pivot methods. I want to add one more comment. I believe the benefit

Re: Memory protection and the push instruction (amd64)

2021-12-06 Thread Theo de Raadt
Otto Moerbeek wrote: > On Mon, Dec 06, 2021 at 05:59:41AM +, slembcke wrote: > > > So this is a fairly esoteric question, and I expect the answer might > > be just as esoteric. > > > > I have a little toy fiber/stackless coroutine library that I made a > > few years ago and have been using

Re: Memory protection and the push instruction (amd64)

2021-12-05 Thread Otto Moerbeek
On Mon, Dec 06, 2021 at 05:59:41AM +, slembcke wrote: > So this is a fairly esoteric question, and I expect the answer might > be just as esoteric. > > I have a little toy fiber/stackless coroutine library that I made a > few years ago and have been using in some of my hobby projects. >