5 ms·
How is it different from using Clang's CFI (control flow integrity)? I thought this was the same technique used in webassembly. Chromium is using this too i t
by paulgdp 5y ago
How is it different from using Clang's CFI (control flow integrity)?
I thought this was the same technique used in webassembly.
Chromium is using this too i think
- azakai 5y agoCFI helps with control flow exploits, but it doesn't prevent memory corruption for example. This sandboxing technique ensures that both control flow and memory accesses remain in the sandbox (except for when you explicitly allow otherwise).