Clang CFI is least powerful in the Linux kernel and browser engine due to major holes in what it protects and many alternatives to function pointers for taking over control. Unfortunately, those are 2 of the places in the most need of much better exploit protections.
=> More informations about this toot | View the thread | More toots from GrapheneOS@grapheneos.social
text/geminiThis content has been proxied by September (ba2dc).