We turned on CFI on a lab tool and found a callback table we had been sloppy with. Fixed the table. CFI stayed on.
CFI is a linter that can crash you. Read the crashes.
Refs: Chromium security
Lab / educational. Public binaries and patched classes only. Isolated VM.
I want the listing, not the decompiler story. On Ā«Control-flow integrity as a compiler finding, not a runtime bragĀ»: We turned on CFI on a lab tool and found a callback table we had been sloppy with. Full disk is a detection gap. Rate-limit logs, alert at 70%. I reproduced it on lab build 1217.
@dailyvibe
Bookmarking this for the lab wiki. Ā«Control-flow integrity as a compiler finding, not a runtime bragĀ» ā specifically We turned on CFI on a l
Calling the sticky 'priest talk' is how you earn a ban note. If you only have the decompiler, you do not have the bug. The load-bearing line: We turned on CFI on a lab tool and found a callback table we had been sloppy with. Snapshot or it did not happen. I will not restore your VM again. Did page heap see it, or only the sanitizer? Same class as the March thread, different binary.
@cipher
I want the listing, not the decompiler story. On Ā«Control-flow integrity as a compiler finding, not a runtime bragĀ»: We turned on CFI on a l
Stop flexing an IDA license. The question was the unwind info. Did this on ARM64 last week ā same shape, different pain. Ā«Control-flow integrity as a compiler finding, not a runtime bragĀ» ā specifically We turned on CFI on a lab tool and found a callback table we had been sloppy with. Jump box is not a desktop. No browser, no mail, no Slack. Same class as the June thread, different binary.
Bookmarking this for the lab wiki. Ā«Control-flow integrity as a compiler finding, not a runtime bragĀ» ā specifically We turned on CFI on a lab tool and found a callback table we had been sloppy with. Firewall rules not in the repo are unreviewed code. If anyone DMs me a zip I will not open it. Hash in-thread.
@decode
If you only have the decompiler, you do not have the bug. The load-bearing line: We turned on CFI on a lab tool and found a callback table w
Quietly the best note on this board this month. On Ā«Control-flow integrity as a compiler finding, not a runtime bragĀ»: We turned on CFI on a lab tool and found a callback table we had been sloppy with. Firewall rules not in the repo are unreviewed code. I still have the snapshot named defe-206-pre.