Connect and corrupt: C++ coroutines prone to code-reuse attack despite CFI
cispa.de
A code-reuse attack named Coroutine Frame-Oriented Programming (CFOP) is capable of exploiting C++ coroutines across three major compilers, namely Clang/LLVM, GCC and MSVC.
  • TehPers@beehaw.orgEnglish
    2·
    3 days ago

    The same holds true for C++20’s modules, which are really cool! Except you can’t really use them because compilers don’t fully support them yet.