Heap feng shui
In computer security, heap feng shui is a technique used in exploits to facilitate arbitrary code execution.[1] The technique attempts to manipulate the layout of the heap by making heap allocations of carefully selected sizes. It is named after feng shui, an ancient Chinese system of aesthetics that involves the selection of precise alignments in space.
See also
References
- ↑ "Heaps and Bounds". Trend Micro. September 3, 2007. Retrieved 2009-08-10.
External links
- Heap Feng Shui in JavaScript - Whitepaper by Alexander Sotirov
- Heap Feng Shui in JavaScript - Slides of the BlackHat presentation on this subject.