{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2020:NKKXKAO62BIS2AZN3C2OYCMKIK","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"6aaf23d4ff0a3c9bb66fba5edf866af81af2867e9c671757561d45716306e79c","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2020-03-11T19:53:45Z","title_canon_sha256":"e97cd2f2de60efa0f22460965360292a8fbb8e1cd1f07c774a320c1153ffe323"},"schema_version":"1.0","source":{"id":"2003.05503","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2003.05503","created_at":"2026-07-05T02:33:04Z"},{"alias_kind":"arxiv_version","alias_value":"2003.05503v3","created_at":"2026-07-05T02:33:04Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2003.05503","created_at":"2026-07-05T02:33:04Z"},{"alias_kind":"pith_short_12","alias_value":"NKKXKAO62BIS","created_at":"2026-07-05T02:33:04Z"},{"alias_kind":"pith_short_16","alias_value":"NKKXKAO62BIS2AZN","created_at":"2026-07-05T02:33:04Z"},{"alias_kind":"pith_short_8","alias_value":"NKKXKAO6","created_at":"2026-07-05T02:33:04Z"}],"graph_snapshots":[{"event_id":"sha256:1901d725d1ae12ddc9f8229a297c5ac8559b83f13dbcc6b44baeb60b2860070d","target":"graph","created_at":"2026-07-05T02:33:04Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2003.05503/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"The prevalence of memory corruption bugs in the past decades resulted in numerous defenses, such as stack canaries, control flow integrity (CFI), and memory safe languages. These defenses can prevent entire classes of vulnerabilities, and help increase the security posture of a program. In this paper, we show that memory corruption defenses can be bypassed using speculative execution attacks. We study the cases of stack protectors, CFI, and bounds checks in Go, demonstrating under which conditions they can be bypassed by a form of speculative control flow hijack, relying on speculative or arch","authors_text":"Alessandro Sorniotti, Alexandra Sandulescu, Andrea Mambretti, Anil Kurmus, Engin Kirda, William Robertson","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2020-03-11T19:53:45Z","title":"Bypassing memory safety mechanisms through speculative control flow hijacks"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2003.05503","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:9a8dd36597d5fae074619f00737738fdc0a65eb94583b0479c11208103a6e6ea","target":"record","created_at":"2026-07-05T02:33:04Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"6aaf23d4ff0a3c9bb66fba5edf866af81af2867e9c671757561d45716306e79c","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2020-03-11T19:53:45Z","title_canon_sha256":"e97cd2f2de60efa0f22460965360292a8fbb8e1cd1f07c774a320c1153ffe323"},"schema_version":"1.0","source":{"id":"2003.05503","kind":"arxiv","version":3}},"canonical_sha256":"6a957501ded0512d032dd8b4ec098a42b310c5be06e4ffb2cc013071a376ef70","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"6a957501ded0512d032dd8b4ec098a42b310c5be06e4ffb2cc013071a376ef70","first_computed_at":"2026-07-05T02:33:04.673474Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T02:33:04.673474Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"zyKTctBN1kStCqiw4eEAaVsZS6kzD+WftYmYEypboUXYUscAh02YueZsKFcgdJMS4CY46QOuWI5YqZ3QyHCQBw==","signature_status":"signed_v1","signed_at":"2026-07-05T02:33:04.673835Z","signed_message":"canonical_sha256_bytes"},"source_id":"2003.05503","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:9a8dd36597d5fae074619f00737738fdc0a65eb94583b0479c11208103a6e6ea","sha256:1901d725d1ae12ddc9f8229a297c5ac8559b83f13dbcc6b44baeb60b2860070d"],"state_sha256":"37f2e550016ccc1f7d3227c475cada8456d9b23d27d9e5ef651cee0e5ff19fb2"}