diff options
Diffstat (limited to 'static/features.html')
| -rw-r--r-- | static/features.html | 7 |
1 files changed, 7 insertions, 0 deletions
diff --git a/static/features.html b/static/features.html index 677a314e..2673a3f0 100644 --- a/static/features.html +++ b/static/features.html @@ -365,6 +365,13 @@ larger address space (48-bit instead of 39-bit) with significantly higher entropy Address Space Layout Randomization (33-bit instead of 24-bit).</li> + <li>Basic hardware memory tagging is used in the main kernel + memory allocators (slab, page_alloc, non-executable vmalloc) to + provide probabilistic detection of all use-after-free and + inter-object overflows along with deterministic detection of + use-after-free until the memory is allocated again (we plan to + add deterministic detection of small/linear overflows like + hardened_malloc)</li> <li>Random canaries with a leading zero are added to the kernel heap (slub) to block C string overflows, absorb small overflows and detect linear overflows or other heap corruption |