Date: Wed, 22 Nov 2017 15:41:56 -0500 From: Daniel Micay <danielmicay@...il.com> To: Kees Cook <keescook@...omium.org> Cc: zerons <zeronsaxm@...il.com>, Kernel Hardening <kernel-hardening@...ts.openwall.com>, Alexander Popov <alex.popov@...ux.com> Subject: Re: a part of SLAB_FREELIST_HARDENED feature doesn't work well Also see this out-of-tree patch: https://github.com/copperhead/linux-hardened/commit/d6aa68684a28eac7270f715ece25998b2c9804c8 It's similar to the slub redzones but designed for hardening rather than finding bugs. It's not great at detecting double-free without a quarantine like KASan though. Allocations get handed out again very quickly (LIFO policy via free lists). A quarantine could also improve poisoning-based write-after-free detection along with providing inherent resistance to use-after-free, etc. exploitation especially if it's partially randomized.
Powered by blists - more mailing lists
Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.