jmb
/
hardened_malloc
mirror of https://github.com/GrapheneOS/hardened_malloc.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

update README now that MTE is implemented

pull/226/head 2023103100-shusky
Daniel Micay 2023-10-30 14:23:07 -04:00
parent fd75fc1ba8
commit f793a3edf6
1 changed files with 7 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
README.md
View File

@ -470,16 +470,16 @@ was a bit less important and if a core goal was finding latent bugs.
* Errors other than ENOMEM from mmap, munmap, mprotect and mremap treated * Errors other than ENOMEM from mmap, munmap, mprotect and mremap treated
as fatal, which can help to detect memory management gone wrong elsewhere as fatal, which can help to detect memory management gone wrong elsewhere
in the process. in the process.
* [future] Memory tagging for slab allocations via MTE on ARMv8.5+ * Memory tagging for slab allocations via MTE on ARMv8.5+
* random memory tags as the baseline, providing probabilistic protection * random memory tags as the baseline, providing probabilistic protection
against various forms of memory corruption against various forms of memory corruption
* dedicated tag for free slots, set on free, for deterministic protection * dedicated tag for free slots, set on free, for deterministic protection
against accessing freed memory against accessing freed memory
* store previous random tag within freed slab allocations, and increment it
to get the next tag for that slot to provide deterministic use-after-free
detection through multiple cycles of memory reuse
* guarantee distinct tags for adjacent memory allocations by incrementing * guarantee distinct tags for adjacent memory allocations by incrementing
past matching values for deterministic detection of linear overflows past matching values for deterministic detection of linear overflows
* [future] store previous random tag and increment it to get the next tag
for that slot to provide deterministic use-after-free detection through
multiple cycles of memory reuse
## Randomness ## Randomness
@ -721,6 +721,9 @@ freeing as there would be if the kernel supported these features directly.
## Memory tagging ## Memory tagging
**Memory tagging has been implemented and this section is currently
out-of-date.**
Integrating extensive support for ARMv8.5 memory tagging is planned and this Integrating extensive support for ARMv8.5 memory tagging is planned and this
section will be expanded to cover the details on the chosen design. The approach section will be expanded to cover the details on the chosen design. The approach
for slab allocations is currently covered, but it can also be used for the for slab allocations is currently covered, but it can also be used for the