if I read between the lines of this @grsecurity post… PaX doesn’t have userland stack proving and thus isn’t immune, despite claim @ start?
3
what leaks do you need? for spraying or content? if the latter, assume you know static addresses/content (vmlinux/modules).
Jun 21, 2017 · 11:06 AM UTC
1

