memory tagging should be a game changer for C and C++; get with the program, @intel and @apple!!pic.twitter.com/z2vXAtTb7z
-
It is not (only) a (weak) mitigation - it is a tool to discover bugs and vulnerabilities in the field. Testing - including smart fuzzing - does not find all memory access defects. But if MTE information is collected IN THE FIELD you find these defects and with absolute precision
If that was really the goal you could just opportunistically deploy (HW)Asan, which is more precise and doesn’t require replacing billions of devices.
-
-
Replacing? One deploys it on new devices only. Asan has a huge performance/overhead impact. HWasan’s is still large. The MTE has a very small impact in memory overhead (IIRC 3-5%) and a similar one in performance. There is a good reason we chose to do that (and GOOG is onboard).
-
Regarding precision: it will find the bug exactly where it occurs - not downstream where it may cause a crash. It may need more than one run but that’s it.
Kraj razgovora
Novi razgovor -
Čini se da učitavanje traje već neko vrijeme.
Twitter je možda preopterećen ili ima kratkotrajnih poteškoća u radu. Pokušajte ponovno ili potražite dodatne informacije u odjeljku Status Twittera.