ROP gadget generation on the Xtensa LX7
Abir Mojumder · 2023
Return Oriented Programming (ROP) is a powerful exploit that can overcome established defense mechanisms. This exploit hijacks control of a program without injecting code into the stack. Since its introduction in 2007, there have been studies in this field of exploits and its variations such as Return-into-libc, Jump oriented programming, and ROP without returns for various architectures. ROP gadgets are specific to the ISA as they are formed by taking pieces of existing code within the program’s memory and/or linked libraries. This paper discusses the Xtensa LX7 architecture’s unique relationship between the stack and register file behavior, and how it can be exploited to perform a buffer overflow attack that leads to ROP. Finally, a collection of programs is used to extract gadgets via an automated gadget search tool. These gadgets are then analyzed to determine their feasibility for gadget chaining