Some initial documentation for my new hardened malloc implementation:
github.com/AndroidHardeni
It's still in an early state of development with major parts of the core design and many security features not yet implemented. It should work with nearly any programs already though.
Conversation
Replying to
Here's a simple test program demonstrating the isolated memory regions:
gist.github.com/thestinger/dd7
Output with the glibc allocator is included as a reference point (the offsets are constant in practice) and then 3 samples with a recent revision of this new malloc implementation.
1
4
You’re unable to view this Tweet because this account owner limits who can view their Tweets. Learn more
Scudo is entirely based on inline metadata and free lists. It relies on CRC32 to detect metadata corruption and can't reliably detect invalid free in the same way. Having fully out-of-line metadata is extremely important for providing many other security properties too.
1
1
1
Show replies