How is it different from using Clang's CFI (control flow integrity)?
I thought this was the same technique used in webassembly.
Chromium is using this too i think
I thought this was the same technique used in webassembly.
Chromium is using this too i think
This sandboxing technique ensures that both control flow and memory accesses remain in the sandbox (except for when you explicitly allow otherwise).