Conversation

I added a section to the hardened malloc documentation on the chosen approach to memory tagging for slab allocations: github.com/AndroidHardeni In addition to guaranteed linear overflow detection, it will guarantee that use-after-free is detected until the tag wraps all the way.

This Tweet was deleted by the Tweet author. Learn more

Replying to

and

Yeah, it's a very similar architecture feature and my plan for using it closely matches how they do it. The ARM architecture documentation is currently missing detailed documentation on it so there are details that I won't be able to figure out about the design until I see more.

9:45 PM · Feb 4, 2019Twitter Web Client

Replying to

and

I'm particularly interested in how it interacts with other features since some are going to be almost entire useless (write-after-free check) or far less useful (canaries) along with other features gaining some useful properties mixed with the tags (quarantine, randomization).

Replying to

and

Canaries also get basically useless, as they don't add value once you have tagging

Show replies