Wrote-up a blog post explaining LLVM's SafeStack

Project Infrastructure LLVM Dev List Archives
1

http://blog.includesecurity.com/2015/11/LLVM-SafeStack-buffer-overflowprotection.html

We thought this might be a good explanation of the feature for general developers. If there are any inaccuracies please let me know and we’ll make corrections.

Thanks for all the great work from pcc and the rest of the LLVM team to implement this feature into 3.8!

Cheers,

2

Nice!
Should it live in http://llvm.org/docs ?

3

A minor correction: Code Pointer Integrity is CPI, not CFI (Control Flow Integrity is something different).

If you’re claiming to talk about the weaknesses, then you should probably mention this Oakland paper, which shows how the CPI implementation that uses SafeStack can be broken:

David