Changes

Jump to: navigation, search

B2G/Architecture/System Security

100 bytes added, 22:45, 3 December 2012
m
no edit summary
=== Risks ===
* Loading libraries and application code at predictable or fixed addresses leads to easy exploitation of memorycorruption vulnerabilities
=== Proposed Implementations ===
** Requires patching of various components
*** Failure to do would result in only partial ASLR, which is no better than no ASLR
** May lead to slower process startup and high performance penalties- however, recent builds of B2G pre-start a content-process, which may hide any performance penalty
== Updates ==
Confirm
502
edits

Navigation menu