Kangjie Lu

You can ignore this function. The functionality is realized with other functions.

This "data-only" attack is indeed cool. The assumption here is that the normal developer obtains the "displacement" of the member virtual function and saves it in unsafe memory. Attackers can...

If the displacement is dereferenced through vtable, then randomizing entries in vtables would help mitigate such attacks. Anyway, this attack sounds very interesting, especially when targeting non-virtual members. I would...