Shadow Stack

Properties

name

Shadow Stack

definition

A shadow stack is a mechanism for protecting a procedure's stored return address, such as from a stack buffer overflow. The shadow stack itself is a second, separate stack that "shadows" the program call stack. In the function prologue, a function stores its return address to both the call stack and the shadow stack. In the function epilogue, a function loads the return address from both the call stack and the shadow stack, and then compares them. If the two records of the return address differ, then an attack is detected.

defined by

https://dbpedia.org/page/Shadow_stack

Neighbors

        graph LR;

     d3f:ShadowStack["Shadow Stack"] --> | copy-of | d3f:CallStack["Call Stack"]; 

          class d3f:ShadowStack RootArtifactNode; class d3f:CallStack ArtifactNode;
          click d3f:ShadowStack href "/dao/artifact/undefined";
          click d3f:CallStack href "/dao/artifact/d3f:CallStack";