Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Date: Wed, 10 Dec 2014 13:51:12 -0500
From: Daniel Micay <danielmicay@...il.com>
To: oss-security@...ts.openwall.com
Subject: Re: Offset2lib: bypassing full ASLR on 64bit Linux

On 10/12/14 01:20 PM, Daniel Micay wrote:
>
> I expect that the same thing can be caused by making aligned
> allocations. If you make a 4M naturally aligned allocation via an API
> like posix_memalign, the allocator will probably mmap 4M + the maximum
> excess. If it unmaps the excess memory at the head/tail, then it will
> have wiped out 10 bits of entropy for future mmap allocations because
> the tail will always be at a 4M boundary.

(ofc this isn't limited to mmap, but it's a simple example)


Download attachment "signature.asc" of type "application/pgp-signature" (820 bytes)

Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.