Hacker News new | past | comments | ask | show | jobs | submit login

IFUNC and landlock could be debugged pretty easily at runtime, just by adding some instrumentation.



Yes but that requires you to know that someone will use it beforehand.


Now that we know IFUNC can me misused like this, it would be pretty silly if we allow other, future exploits to use the same trick.


ifunc was only used because it’s an obscure feature that is little-used and provides a way to convert a backdoor into easy execution. There are many others and it would be silly to try to catch them all.




Consider applying for YC's Spring batch! Applications are open till Feb 11.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: