Re: ASLR/PIE status in FreeBSD HEAD

Ed Maste <[email protected]>
Newsgroups gmane.os.freebsd.security.general
Message-ID <CAPyFy2A_71O-vW-0Qaievoi2ixh_kQU6yCa3m7nEP29-260=Bw@mail.gmail.com> 
On Fri, 17 Apr 2020 at 09:13, Shawn Webb <[email protected]> wrote:
>
> Quick note: paxtest's algorithms for measuring ASLR was meant to test
> ASLR, not FreeBSD's ASR implementation. Thus, paxtest results for
> FreeBSD's ASR are moot.

paxtest's entropy estimate is superficial, and indeed can produce a
more or less invalid result depending on the distribution of allocated
objects. There are a number of other tools which perform a more
rigorous or comprehensive analysis.

paxtest is useful in providing basic indication of whether various
things are randomized or not.
_______________________________________________
[email protected] mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-security
To unsubscribe, send any mail to "[email protected]"
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.