ROP and JOP attack protection

[Mikhail Maltsev]

On 05/23/2016 08:50 PM, Roy Leblanc wrote:
> Hello all,
> 
> Does GCC's code generator at this point provide protection against ROP and JOP attacks? This can be achieved by carefully controlling what opcode bytes and immediate values are produced. It can also be achieved by rewriting assembler output as you see with the AntiJOP project.
> 
> More information: https://en.wikipedia.org/wiki/Return-oriented_programming
> 
> -Roy
> 
IIUC, this is still work in progress. Some initial support is available in GCC
6.1: https://gcc.gnu.org/ml/gcc-patches/2015-11/msg01773.html


-- 
Regards,
    Mikhail Maltsev