You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Remove the global reference to context. Currently we have: struct shiva_ctx *ctx_global defined as a global initialized variable in shiva.c. This global variable is predictable in the AARCH64 version because our Interpreter is an ET_EXEC (vs. PIE ET_DYN). This means that an attacker who's exploiting a memory corruption vulnerability could use this as leak to determine the ASLR space or gain access to other read/write primitives.
(Will add more to the list)
The text was updated successfully, but these errors were encountered:
struct shiva_ctx *ctx_global
defined as a global initialized variable in shiva.c. This global variable is predictable in the AARCH64 version because our Interpreter is an ET_EXEC (vs. PIE ET_DYN). This means that an attacker who's exploiting a memory corruption vulnerability could use this as leak to determine the ASLR space or gain access to other read/write primitives.(Will add more to the list)
The text was updated successfully, but these errors were encountered: