On Thu, Oct 29, 2020 at 06:02:58PM +0000, Richard Sandiford wrote: > Qing Zhao via Gcc-patches <gcc-patches@gcc.gnu.org> writes: > >>> +Return-Oriented Programming (ROP) or preventing information leak > >> > >> leakage > >> > >> (FWIW, I'm not sure “mitigating ROP” is really correct usage, but I don't > >> have any better suggestions.) > > > > Do you mean whether “mitigating ROP’ is one of the major purpose of this > > new feature? > > No, I meant just the English usage. E.g., I think you mitigate the > damage caused by earthquakes rather than mitigate earthquakes themselves. > But I could be wrong. It's not a word I use very often ;-)
"Mitigating ROP attacks" is a phrase often used in the literature, sadly (what is really meant is not "mitigating the effects of ROP attacks", but simply "making ROP attacks less likely to succeed" -- it is almost always a binary thing, either it succeeds or it doesn't). Segher