C/C++ • ARM PAC BTI support?

Code:

pi@raspberrypi5:~ $ grep "bti" /proc/cpuinfo pi@raspberrypi5:~ $ 

Code:

pi@raspberrypi5:~ $ gcc --versiongcc (Debian 12.2.0-14) 12.2.0Copyright (C) 2022 Free Software Foundation, Inc.This is free software; see the source for copying conditions.  There is NOwarranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.pi@raspberrypi5:~ $ 

Code:

#include <stdio.h>void target() { printf("ROP attack worked\n"); }void hello() {  int xxx;  printf("Trying to overwrite return address of hello()\n");  *((&xxx) - 0x5) = target;}int main() {  hello();}

Code:

pi@raspberrypi5:~ $ gcc rop.c rop.c: In function ‘hello’:rop.c:8:19: warning: assignment to ‘int’ from ‘void (*)()’ makes integer from pointer without a cast [-Wint-conversion]    8 |   *((&xxx) - 0x5) = target;      |                   ^pi@raspberrypi5:~ $ ./a.out | head -3Trying to overwrite return address of hello()ROP attack workedROP attack workedpi@raspberrypi5:~ $ 

Code:

pi@raspberrypi5:~ $ gcc -mbranch-protection=standard rop.c rop.c: In function ‘hello’:rop.c:8:19: warning: assignment to ‘int’ from ‘void (*)()’ makes integer from pointer without a cast [-Wint-conversion]    8 |   *((&xxx) - 0x5) = target;      |                   ^pi@raspberrypi5:~ $ ./a.out | head -3Trying to overwrite return address of hello()ROP attack workedROP attack workedpi@raspberrypi5:~ $