2019
02.01

XNU vm_map_copy optimization which requires atomicity is not atomic. This violates the semantics of mach message OOL memory, and leads to TOCTOU issues which can lead to memory corruption.

No Comment.

Add Your Comment

You must be logged in to post a comment.