%PDF-1.4
%
1 0 obj
<< /S /GoTo /D (section.1) >>
endobj
4 0 obj
(Introduction)
endobj
5 0 obj
<< /S /GoTo /D (section.2) >>
endobj
8 0 obj
(ROP without Returns)
endobj
9 0 obj
<< /S /GoTo /D (section.3) >>
endobj
12 0 obj
(Instantiation on Intel x86)
endobj
13 0 obj
<< /S /GoTo /D (subsection.3.1) >>
endobj
16 0 obj
(Update-Load-Branch on the x86)
endobj
17 0 obj
<< /S /GoTo /D (subsection.3.2) >>
endobj
20 0 obj
(Gadget Set)
endobj
21 0 obj
<< /S /GoTo /D (section.4) >>
endobj
24 0 obj
(Instantiation on ARM)
endobj
25 0 obj
<< /S /GoTo /D (subsection.4.1) >>
endobj
28 0 obj
(ARM/THUMB Instruction Set)
endobj
29 0 obj
<< /S /GoTo /D (subsection.4.2) >>
endobj
32 0 obj
(Attack Method Design)
endobj
33 0 obj
<< /S /GoTo /D (subsection.4.3) >>
endobj
36 0 obj
(Gadget Set)
endobj
37 0 obj
<< /S /GoTo /D (section.5) >>
endobj
40 0 obj
(Getting Started)
endobj
41 0 obj
<< /S /GoTo /D (section.6) >>
endobj
44 0 obj
(Concrete Attacks)
endobj
45 0 obj
<< /S /GoTo /D (subsection.6.1) >>
endobj
48 0 obj
(Linux Intel x86)
endobj
49 0 obj
<< /S /GoTo /D (subsection.6.2) >>
endobj
52 0 obj
(Google Android ARM)
endobj
53 0 obj
<< /S /GoTo /D (section.7) >>
endobj
56 0 obj
(Conclusion)
endobj
57 0 obj
<< /S /GoTo /D (section.8) >>
endobj
60 0 obj
(Acknowledgments)
endobj
61 0 obj
<< /S /GoTo /D (section.9) >>
endobj
64 0 obj
(References)
endobj
65 0 obj
<< /S /GoTo /D [66 0 R /Fit ] >>
endobj
95 0 obj <<
/Length 5136
/Filter /FlateDecode
>>
stream
xڭ[Ys6~*BE ==a{[zc~`PlYCܖU;/* qL(7ς?ϿN&L\l OhfzB"!?qm8چwppm2,sRxwJW`JP˦g Om()<@%
-#8gb0:dͭ*a(_z2h9c'jm]Cw.6M{@S߄Ύuk
+\/c
7{d-M7"=z3('r:O9&O0ZqYܑ?x*t偛ےx2ܹ??
uðv*84[Tx5h0ɵuPVz0mοqаWk+6k;+z3+H3
p۹ߖ
k3n T{3p7\:.WҔ\" Z693(o̠Qyp[xiZ95TʮFv[R&}`qyeK,z3u)? ^spY},%D^eMnhKx-@_4$c'*z?gUE>pdin;TAt61["@/VSLΐmkwF̑jHCŘ3lEL۴k{:Q!=yH\IQUE{d/c4n$wF9v3*ȡVr=WҸ>d8pPAtsr]b3ph 85*{8~;ӗ=
mm}G~LUL@2N g(\")@\dGcw-2ؙ+ T8Fߘ%g@_; Ot8W/@
چAxoݛ߾~eiL&x