This paper evaluates AddressSanitizer as a next generation memory corruption prevention framework. It provides demonstrable tests of problems that are fixed, as well as problems that still exist.
8245bb4a3851c5b9dd116e5ce5f16365b106f7cd68233e4a4905c1d4cf4e7e8a
This is a whitepaper discussing flaws in current stack protection mechanisms and alternate methods of exploiting stack overflows. The paper wastes no time rehashing old methods such as ret2libc or bruteforcing methods against ASLR on forked processes.
4e7ed680646bbcb7250b372e45b6466b0c75f778391612843c163ce4ccd1a39e