mirror of
https://github.com/Gericom/teak-llvm.git
synced 2025-06-29 16:29:00 -04:00
712fc9803a
Summary: This is an initial implementation of a Hardened Allocator based on Sanitizer Common's CombinedAllocator. It aims at mitigating heap based vulnerabilities by adding several features to the base allocator, while staying relatively fast. The following were implemented: - additional consistency checks on the allocation function parameters and on the heap chunks; - use of checksum protected chunk header, to detect corruption; - randomness to the allocator base; - delayed freelist (quarantine), to mitigate use after free and overall determinism. Additional mitigations are in the works. Reviewers: eugenis, aizatsky, pcc, krasin, vitalybuka, glider, dvyukov, kcc Subscribers: kubabrecka, filcab, llvm-commits Differential Revision: http://reviews.llvm.org/D20084 llvm-svn: 271968
36 lines
1.4 KiB
C++
36 lines
1.4 KiB
C++
//===-- scudo_flags.inc -----------------------------------------*- C++ -*-===//
|
|
//
|
|
// The LLVM Compiler Infrastructure
|
|
//
|
|
// This file is distributed under the University of Illinois Open Source
|
|
// License. See LICENSE.TXT for details.
|
|
//
|
|
//===----------------------------------------------------------------------===//
|
|
///
|
|
/// Hardened Allocator runtime flags.
|
|
///
|
|
//===----------------------------------------------------------------------===//
|
|
|
|
#ifndef SCUDO_FLAG
|
|
# error "Define SCUDO_FLAG prior to including this file!"
|
|
#endif
|
|
|
|
SCUDO_FLAG(int, QuarantineSizeMb, 64,
|
|
"Size (in Mb) of quarantine used to delay the actual deallocation "
|
|
"of chunks. Lower value may reduce memory usage but decrease the "
|
|
"effectiveness of the mitigation.")
|
|
|
|
SCUDO_FLAG(int, ThreadLocalQuarantineSizeKb, 1024,
|
|
"Size (in Kb) of per-thread cache used to offload the global "
|
|
"quarantine. Lower value may reduce memory usage but might increase "
|
|
"the contention on the global quarantine.")
|
|
|
|
SCUDO_FLAG(bool, DeallocationTypeMismatch, true,
|
|
"Report errors on malloc/delete, new/free, new/delete[], etc.")
|
|
|
|
SCUDO_FLAG(bool, DeleteSizeMismatch, true,
|
|
"Report errors on mismatch between size of new and delete.")
|
|
|
|
SCUDO_FLAG(bool, ZeroContents, false,
|
|
"Zero chunk contents on allocation and deallocation.")
|