add a FIFO malloc quarantine in addition to the random one #167

thestinger · Feb 6, 2016

The randomized quarantine is a good way of introducing randomness into the heap layout, but it only guarantees that allocations are delayed for a single free cycle. A FIFO quarantine can provide a more meaningful guarantee, potentially mitigating use-after-free vulnerabilities (especially in conjunction with the junk validation code).

This is now implemented.

thestinger · Feb 10, 2016

This is now implemented.

thestinger added the Type: enhancement label Feb 6, 2016

thestinger changed the title from add a deterministic malloc quarantine on top of the random one to add a deterministic malloc quarantine in additon to the random one Feb 6, 2016

thestinger changed the title from add a deterministic malloc quarantine in additon to the random one to add a FIFO malloc quarantine in additon to the random one Feb 6, 2016

thestinger added the Component: hardened malloc label Feb 6, 2016

thestinger changed the title from add a FIFO malloc quarantine in additon to the random one to add a FIFO malloc quarantine in addition to the random one Feb 10, 2016

thestinger closed this Feb 10, 2016

copperhead/bugtracker

add a FIFO malloc quarantine in addition to the random one #167

thestinger commented Feb 6, 2016

thestinger added the Type: enhancement label Feb 6, 2016

thestinger changed the title from add a deterministic malloc quarantine on top of the random one to add a deterministic malloc quarantine in additon to the random one Feb 6, 2016

thestinger changed the title from add a deterministic malloc quarantine in additon to the random one to add a FIFO malloc quarantine in additon to the random one Feb 6, 2016

thestinger added the Component: hardened malloc label Feb 6, 2016

thestinger changed the title from add a FIFO malloc quarantine in additon to the random one to add a FIFO malloc quarantine in addition to the random one Feb 10, 2016

This comment has been minimized.

thestinger commented Feb 10, 2016

thestinger closed this Feb 10, 2016

copperhead/bugtracker

Join GitHub today

add a FIFO malloc quarantine in addition to the random one #167

Comments

thestinger commented Feb 6, 2016

thestinger added the Type: enhancement label Feb 6, 2016

thestinger changed the title from add a deterministic malloc quarantine on top of the random one to add a deterministic malloc quarantine in additon to the random one Feb 6, 2016

thestinger changed the title from add a deterministic malloc quarantine in additon to the random one to add a FIFO malloc quarantine in additon to the random one Feb 6, 2016

thestinger added the Component: hardened malloc label Feb 6, 2016

thestinger changed the title from add a FIFO malloc quarantine in additon to the random one to add a FIFO malloc quarantine in addition to the random one Feb 10, 2016

This comment has been minimized.

thestinger Feb 10, 2016

thestinger commented Feb 10, 2016

thestinger closed this Feb 10, 2016