Automated CFI for Legacy C/C++ Systems
Analysis
Key Takeaways
- •CFIghter automates the deployment of CFI in legacy C/C++ systems.
- •It addresses visibility mismatches, type inconsistencies, and behavioral failures.
- •The system uses whole-program analysis, runtime monitoring, and iterative adjustments.
- •Evaluation on GNU projects demonstrates high success rates in violation repair and CFI enforcement.
“CFIghter automatically repairs 95.8% of unintended CFI violations in the util-linux codebase while retaining strict enforcement at over 89% of indirect control-flow sites.”