Sigreturn-Oriented Programming exploits Linux signal mechanism for attack primitives

·1 views

Sigreturn-Oriented Programming (SROP) exploits a standard Linux mechanism designed to resume processes after signal interruptions. When the kernel delivers a signal, it saves the process's complete execution state to a user-space stack frame. An attacker who can control or corrupt this saved state can dictate what registers and instruction pointers are restored. This allows a single 'sigreturn' system call to set up complex machine states, overcoming limitations in traditional Return-Oriented Programming (ROP) attacks.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

NPM package enables saving and loading Fabric.js canvas JSON via custom API

A new NPM package called fabricjs-document-engine provides a storage adapter for saving and loading Fabric.js canvas projects. It connects a developer's existing Fabric.js canvas to their own HTTP endpoints and database for document persistence. The package handles document workflow but leaves the API, authentication, and storage implementation to the application. The guide demonstrates building a React editor with a typed adapter and an Express/PostgreSQL backend. The solution preserves editable JSON data, unlike a static PNG export.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

OpenAI launches Dots agents, meets immediate skepticism from developer community.

OpenAI unveiled 'Dots,' 24/7 AI agents powered by GPT-6 Astra, during its 2026 DevDay event. The company positions Dots as a major distribution channel for turning its 1.2 billion weekly ChatGPT users into agent consumers. However, a prominent Hacker News thread reflected significant skepticism from practitioners, who questioned its utility and differentiation. Early technical demonstrations reportedly encountered performance issues, and the launch excludes users in the European Economic Area, UK, and Switzerland.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

AI Agents Enable Self-Healing CI/CD Pipelines to Fix Code Automatically

A new approach transforms CI/CD pipelines from passive checkpoints into active, self-healing systems. By integrating autonomous AI agents, pipelines can automatically diagnose and fix common failures like dependency issues or broken tests. This process occurs within secure sandboxes, with the agent validating fixes before submitting them as pull requests. The shift aims to reduce developer interruptions and maintain velocity in fast-paced deployment environments.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Proposed Method Uses Verifiable Contracts to Improve LLM Agent Reliability

A developer identifies a common problem where LLM agents perform well in demos but fail in real-world use. The core issue is a lack of precise definitions for agent tools, their outputs, and execution limits. The proposed solution treats each tool as a formal software boundary governed by a verifiable contract. These contracts define mandatory fields, data formats, execution timeouts, and permissible environments. This approach prevents unexpected outputs and enforces security, such as restricting data access based on user permissions.

0 comments Read more at DEV Community