David Coppa [dco...@gmail.com] wrote: > On Wed, Jun 1, 2016 at 3:30 AM, Chris Cappuccio <ch...@nmedia.net> wrote: > > Totally awesome! > > > > awesome(38099): mmap W^X violation > > > > It happens once on startup. Grepping for the obvious stuff doesn't show > > me the issue, perhaps it's a library. There is no obvious ill effect from > > the mmap failure. > > Is your libffi updated to the latest revision?
Looks like I updated right before the libffi changes, so that's probably it. "This switches libffi to the use of two different mappings per closure, one with RW access, the other with RX access. Even if not perfect it is already an improvement." Does that mean it's still basically W|X...but these mappings are accessible at different addresses so the attacker just needs more information ? Chris