Address Oblivious Code Reuse: On the Effectiveness of Leakage Resilient Diversity

It is shown that although current code pointer protections do prevent leakage per se, they are fundamentally unable to stop code reuse, and a new class of attacks is demonstrated called address-oblivious code reuse that bypasses state-of-the-art leakage-resilience techniques by profiling and reusing protected code pointers, without leaking the code layout.