[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <CA+DvKQKeDURwdCgrJ-O-WEtQpk7vJb8_0q8SYaLecp_HTtZ+6w@mail.gmail.com>
Date: Wed, 22 Nov 2017 15:41:56 -0500
From: Daniel Micay <danielmicay@...il.com>
To: Kees Cook <keescook@...omium.org>
Cc: zerons <zeronsaxm@...il.com>,
Kernel Hardening <kernel-hardening@...ts.openwall.com>,
Alexander Popov <alex.popov@...ux.com>
Subject: Re: a part of SLAB_FREELIST_HARDENED feature
doesn't work well
Also see this out-of-tree patch:
https://github.com/copperhead/linux-hardened/commit/d6aa68684a28eac7270f715ece25998b2c9804c8
It's similar to the slub redzones but designed for hardening rather
than finding bugs.
It's not great at detecting double-free without a quarantine like
KASan though. Allocations get handed out again very quickly (LIFO
policy via free lists). A quarantine could also improve
poisoning-based write-after-free detection along with providing
inherent resistance to use-after-free, etc. exploitation especially if
it's partially randomized.
Powered by blists - more mailing lists
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
