Compare commits

...

3 commits

Author SHA1 Message Date
Julien Voisin
d817e7d862
Merge 6e39d5713d into a000fd4b5e 2025-11-16 00:01:37 +01:00
charles25565
a000fd4b5e Bump minimum AOSP version to QPR1 2025-11-15 17:04:35 -05:00
jvoisin
6e39d5713d Add a Citations and mentions section
If only to make it easier to prove that smart(tm) people are looking at how
secure/useable/fast/cool/... GrapheneOS' hardened_malloc is.
2025-06-23 16:23:06 +02:00

View file

@ -22,6 +22,7 @@
* [API extensions](#api-extensions) * [API extensions](#api-extensions)
* [Stats](#stats) * [Stats](#stats)
* [System calls](#system-calls) * [System calls](#system-calls)
* [Citations](#citations-and-mentions)
## Introduction ## Introduction
@ -83,7 +84,7 @@ there will be custom integration offering better performance in the future
along with other hardening for the C standard library implementation. along with other hardening for the C standard library implementation.
For Android, only the current generation, actively developed maintenance branch of the Android For Android, only the current generation, actively developed maintenance branch of the Android
Open Source Project will be supported, which currently means `android16-release`. Open Source Project will be supported, which currently means `android16-qpr1-release`.
## Testing ## Testing
@ -1007,3 +1008,13 @@ Additional system calls when `CONFIG_SEAL_METADATA=true` is set:
Additional system calls for Android builds with `LABEL_MEMORY`: Additional system calls for Android builds with `LABEL_MEMORY`:
* `prctl(PR_SET_VMA, PR_SET_VMA_ANON_NAME, ptr, size, name)` * `prctl(PR_SET_VMA, PR_SET_VMA_ANON_NAME, ptr, size, name)`
## Citations and mentions
- [StarMalloc: Verifying a Modern, Hardened Memory Allocator](https://dl.acm.org/doi/10.1145/3689773) (2024)
- [S2malloc: Statistically Secure Allocator for Use-After-Free Protection And More](https://arxiv.org/abs/2402.01894) (2024))
- [TikTag: Breaking ARM's Memory Tagging Extension with Speculative Execution](https://arxiv.org/abs/2406.08719) (2024)
- [GuaNary: Efficient Buffer Overflow Detection In Virtualized Clouds Using Intel EPT-based Sub-Page Write Protection Support](https://dl.acm.org/doi/10.1145/3626787) (2023)
- [DangZero: Efficient Use-After-Free Detection via Direct Page Table Access](https://dl.acm.org/doi/10.1145/3548606.3560625) (2022)
- [Understanding and Mitigating Memory Corruption Attacks](https://repository.library.northeastern.edu/files/neu:4f186m727/fulltext.pdf), PhD Dissertation (2022)
- [HardsHeap: A Universal and Extensible Framework for Evaluating Secure Allocators](https://dl.acm.org/doi/10.1145/3460120.3484740) (2021)