Section 2.4.1 "Return-oriented Programming": Explain how assembly gadgets could be generated from C/C++

[kbeyls]

See TODO in text.

[lucic71]

Hi,

I think it's worth discussing some modern mitigations for ROP, like pinsyscall(2) from OpenBSD.

[g-kouv]

Hi @lucic71, thanks for the suggestion! I think it's worthwhile adding a section on mitigations beyond CFI that aren't just compiler-based, like the above mentioned pinsyscall, Linux's seccomp (and similar features in other systems, system call interposition more generally), a more detailed view of ASLR (which the post you linked to also mentions) and so on. I'll create a separate issue to track this!

[g-kouv]

Created #199.