Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

While that is nice I'm not quite understanding how this is a security issue? Can code reuse attacks exploit it?



> Actually, file descriptions. The description is the kernel state pertaining to an open file. The descriptor is a small integer referring to a file description. When we send an FD into a UNIX socket, the descriptor number received on the other end might be different, but it will refer to the same description.↩

Oh man, that perfectly explains a formerly-unanswered question I had about how that mechanism worked. Thanks for linking.


Yes, look at ROP gadgets, for example.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: