CFI can make attacks harder, but not a panacea. However, I believe all future defenses should build upon CFI, since, as @yuange1975 points out, "security is condition + statement". CFI just ensures that the condition is always executed before the statement.展开全文 原微博
