|
The iPhone Wiki is no longer updated. Visit this article on The Apple Wiki for current information. |
Posix spawn kernel information leak
Revision as of 19:10, 4 January 2014 by Ra1ningSn0w (talk | contribs)
Vulnerability
There is a vulnerability in the method posix_spawn() in the XNU kernel. When it is used with the flag _POSIX_SPAWN_DISABLE_ASLR, it disables ASLR for the process running. On x86_64 processes it also disables heap randomization. Furthermore the flag _POSIX_SPAWN_ALLOW_DATA_EXEC enables execution on the heap
