Connect and corrupt: C++ coroutines prone to code-reuse attack despite CFI
cispa.de
A code-reuse attack named Coroutine Frame-Oriented Programming (CFOP) is capable of exploiting C++ coroutines across three major compilers, namely Clang/LLVM, GCC and MSVC.
  • bitcrafter@programming.dev
    3·
    3 days ago

    It is pretty sad that a feature that was introduced into C++ five years ago would not be widely used yet, but that also would not surprise me.

    • TehPers@beehaw.orgEnglish
      2·
      3 days ago

      The same holds true for C++20’s modules, which are really cool! Except you can’t really use them because compilers don’t fully support them yet.