Navigation
Search
|
[$] Per-call-site slab caches for heap-spraying protection
Thursday August 22, 2024. 04:15 PM , from LWN.net
One tactic often used by attackers set on compromising a system is heap spraying; in
short, the attacker fills as much of the heap as possible with crafted data in the hope of getting the target system to use that data in a bad way. If heap spraying can be blocked, attackers will lose an important tool. The kernel has some heap-spraying defenses now, including the dedicated bucket allocator merged for the upcoming 6.11 release, but its author, Kees Cook, thinks that more can be done.
https://lwn.net/Articles/986174/
Related News |
25 sources
Current Date
Nov, Tue 5 - 14:49 CET
|