Openwall GNU/*/Linux - a small security-enhanced Linux distro for servers
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Wed, 22 Nov 2017 15:41:56 -0500
From: Daniel Micay <danielmicay@...il.com>
To: Kees Cook <keescook@...omium.org>
Cc: zerons <zeronsaxm@...il.com>, 
	Kernel Hardening <kernel-hardening@...ts.openwall.com>, 
	Alexander Popov <alex.popov@...ux.com>
Subject: Re: a part of SLAB_FREELIST_HARDENED feature
 doesn't work well

Also see this out-of-tree patch:

https://github.com/copperhead/linux-hardened/commit/d6aa68684a28eac7270f715ece25998b2c9804c8

It's similar to the slub redzones but designed for hardening rather
than finding bugs.

It's not great at detecting double-free without a quarantine like
KASan though. Allocations get handed out again very quickly (LIFO
policy via free lists). A quarantine could also improve
poisoning-based write-after-free detection along with providing
inherent resistance to use-after-free, etc. exploitation especially if
it's partially randomized.

Powered by blists - more mailing lists

Your e-mail address:

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.