Does MapUserPhysicalPages (AWE remapping) affect ASLR?
The MapUserPhysicalPages API takes an address allocated using VirtualAlloc with MEM_PHYSICAL and MEM_RESERVE and remaps the pages to a sequence of physical page frame numbers. This is designed to provide AWE support for processes.
To me, this seems like a case where the remapping would cause memory to get placed upon fixed virtual addresses, thus potentially leading to a situation where ASLR could be bypassed by targeting known memory areas.
Am I correct in this assumption? Would the potential for bypass be at user-mode ASLR level or KASLR level?
链接地址: http://www.djcxy.com/p/62196.html上一篇: 记录在OS X上禁用ASLR的方式？