Ask HN: How do buffer overflows still happen in spite of ASLR?
3 comments
ASLR doesn’t do anything to prevent buffer overflows; it makes it harder to exploit them.
That doesn’t mean it makes it impossible, and even if it did, the buffer overflow itself still is a bug.
That doesn’t mean it makes it impossible, and even if it did, the buffer overflow itself still is a bug.
Yes but how does that work? i have heard of unexploitable overflows how does that work?
and hey: Your username tricked me.
and hey: Your username tricked me.
Unexploited overflows are like unproven math. You don't know the truth unless somebody happens to succeed. It's a matter of a stubborn smart person putting in lots of clever effort and getting lucky.
Can someone ELI5 how buffer overflow defeats ASLR?