Time for an Arm-twist! CVE-2023-4039

Tom Hebb (Meta red team) and I discovered an 0day in GCC (for AArch64 targets) during my Arm exploitation training.

It renders stack canaries against overflows of dynamically-sized variables useless.

developer.arm.com/Arm%20Securi...

Raycast Notes
Fast, light, and frictionless note-taking

Learn more 👉 raycast.com/notes

youtu.be/8FTSAqNleuw

✨A new article: (Yet another) Introduction to quaternions!

I'm a mathematician, so my desires are unconventional and my perspective is skewed, but I hope it will be useful at least in some way 😅

I've also added a useful cheatsheet in the end 🥳

lisyarus.github.io/blog/posts/i...