search

zwimer / DrShadowStack

A software defined dynamic shadow stack utilizing dynamorio
http://www.zwimer.com/DrShadowStack/
GNU General Public License v3.0
5 stars 0 forks source link

exec - clear shadow stack #70

Closed zwimer closed 6 years ago

zwimer commented 6 years ago

On forking, the shadow stack is not cleared (correct). If the process then execs, the stack still does not clear (bad). This probably doesn't pose a threat, but just in case it should be fixed

zwimer commented 6 years ago

Maybe hook exec-like syscalls?

zwimer commented 6 years ago

Done via pre syscall hook