For those who want to get their feet wet in exploit mitigation development, writing unit tests to verify current mitigations is a great first step.
This tweet is unavailable
1
4
9
It would be even better to write new tests if you want to include them into base system, because paxtest is GPL.
Or get an exception or relicensing from the authors.
CC: @paxteam
2
Peter wrote most of it, better ask him but you should really reimplement it from scratch as many things have changed since and some tests are specific to the PaX implementation (like the ASLR entropy estimate).
Apr 14, 2020 · 9:53 PM UTC
1