Collected research
Exploiting and Protecting Dynamic Code Generation
JIT compilers and dynamic binary translators hold generated code in a cache that is writable and executable, either at once or in alternation, which revives classic shellcode injection despite W xor X. A multi-threaded Web Worker proof of concept hits that window in browsers, and the proposed fix moves code generation into a separate process writing through shared memory over RPC.
Record
- Researcher
- Chengyu Song, Chao Zhang, Tielei Wang, Wenke Lee and David Melski
- Published by
- NDSS Symposium
- Topic
- Other
In the archive
Tags
This page is the archive's own catalogue record. The research is the work of Chengyu Song, Chao Zhang, Tielei Wang, Wenke Lee and David Melski, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on .