ROP and JOP attack protection

[Roy Leblanc]

Hello all,

Does GCC's code generator at this point provide protection against ROP and JOP attacks? This can be achieved by carefully controlling what opcode bytes and immediate values are produced. It can also be achieved by rewriting assembler output as you see with the AntiJOP project.

More information: https://en.wikipedia.org/wiki/Return-oriented_programming

-Roy