Elektrine lite

← Feed

@andersonc0d3@infosec.exchange

2026-07-25 20:24 UTC

RE: https://infosec.exchange/@andersonc0d3/116980936217755939 This was fixed after I reported a way to bypass pointer guard (PTR_MANGLE) in glibc. I had known about and taught the technique in my binary exploitation classes for a few years (since ~2020/2021), but I wasn't sure whether the glibc team was aware of it. After the report, a developer mentioned several related issues and started working on the fixes. Besides the technique I reported, I didn't know about the others — I don't focus on binary exploitation beyond my training classes. I was surprised by how many issues there were in glibc that allowed mitigation bypasses. The fix for one of those issues landed in glibc 2.44 today. My report: Mitigating __pointer_chk_guard_local exposure and pointer mangling in ld.so https://sourceware.org/pipermail/libc-alpha/2026-May/177729.html

Replies (0)

No replies.