@fsharponline @fsharpconf
I now have #SafeStack working in #HardenedBSD 12-CURRENT/arm64. However, clang is emitting the wrong branch instruction (short branch instead of far branch), causing issues when ASLR is enabled.
My next step is to get clang to emit the right branch instruction, especially since SafeStack requires ASLR. Afterwards, I'll create a custom RPI3 image and issue a call for testing.
We might see SafeStack enabled for arm64 before 2018. :)
#NetBSD follows #HardenedBSD's example with #SafeStack development and integration: https://blog.netbsd.org/tnf/entry/llvm_libfuzzer_and_safestack_ported
#OPNsense 17.7 release. It's the first and only firewall to ship with #SafeStack enabled by default.
I've now learned both when and how #SafeStack creates and manages the unsafe stack. I'm now digging deep into llvm's code to learn how the rest of SafeStack is implemented. Fun stuff.