Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Umm, are you really sure about --disable-reloc-section? #46

Open
p0358 opened this issue Oct 30, 2024 · 0 comments
Open

Umm, are you really sure about --disable-reloc-section? #46

p0358 opened this issue Oct 30, 2024 · 0 comments

Comments

@p0358
Copy link

p0358 commented Oct 30, 2024

.reloc section is needed for ASLR, which is a rather important security measure. I don't think it's a good idea to ever disable that, for like a few bytes of size savings at most perhaps?

Without it any kind of stack buffer vulnerability etc. can lead to very easy and free remote code execution vulnerability. Imagine if there was some bug in the code and it'd allow someone to hack people by setting a malicious present or something. Please, just no.

It's like removing seatbelts from a car. Small useless thing and doesn't change a thing as long as nothing happens. Until something does and you fly out of the windshield instead of getting out unscathed with minor bruises...

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant