[Info-vax] An old VMS vulnerability, was: Re: Calling standards, was: Re: Byte range locking - was Re: Oracle

Stephen Hoffman seaohveh at hoffmanlabs.invalid
Tue Nov 29 09:43:53 EST 2016


On 2016-11-29 13:12:20 +0000, Simon Clubley said:

> Also, I really hope that VSI are making liberal use of the no-execute 
> capability in x86-64 for what should be data-only memory pages.

No-execute is only part of the puzzle.   
https://en.wikipedia.org/wiki/Return-oriented_programming   ASLR and 
other details are also involved.

With OpenVMS memory management on x86-64, the VSI plan to compress 
user, supervisor and executive modes into one processor ring — with 
some sort of software enforcement — looks rather different from 
previous designs.   How this all works and how this all performs, we 
shall learn.


-- 
Pure Personal Opinion | HoffmanLabs LLC 




More information about the Info-vax mailing list