For Linux and Android users, the Firefox 86 web browser activates a new protection to mitigate the so-called Stack Clash attacks, a set of old vulnerabilities in the memory management of several operating systems that could lead to privilege escalation. More details are available here : Bringing Stack Clash Protection to Clang / X86 — the Open Source Way (The LLVM Project Blog).
Accessoirement, un point intéressant extrait de l'article de The LLVM Project Blog lié ci-avant :
Validation with Firefox
Firefox provides an amazing test bench to evaluate the impact of compiler changes. Indeed, with more than 12MLOC of C/C++ and 3MLOC of Rust built using PGO/LTO and XLTO, most of the important cases are covered.
Moreover, Firefox being supported on a large set of operating system and architectures, it was a great way to test the Stack Clash protection on various set of configurations.
# Détail sur The LLVM Project Blog
Posté par antistress (site web personnel) . En réponse au lien Firefox 86 web browser activates a new protection to mitigate the so-called Stack Clash attacks. Évalué à 7. Dernière modification le 23 février 2021 à 15:17.
Parmi les nouveautés évoquées ici :
https://9to5linux.com/firefox-86-released-with-avif-support-by-default-multiple-picture-in-picture
Accessoirement, un point intéressant extrait de l'article de The LLVM Project Blog lié ci-avant :