1. 14

  2. 10

    Note that the implementation resembles ASR, not ASLR, and is a rather expensive NO-OP from a security perspective since the stack and the shared page are not randomized. ;P

    1. 2

      can you explain the difference between ASR and ASLR and why it matters?

      1. 10

        Sure! Address Space Randomization (ASR) differs from Address Space Layout Randomization (ASLR) by ASR’s lack of deltas. In pipacs’ original paper on ASLR, he described using deltas to avoid fragmenting the address space and to avoid hurting performance.

        A more thorough breakdown can be found here.

        1. 1