[tor-bugs] #10281 [Tor Browser]: Investigate usage of alternate memory allocators and memory hardening options

Tor Bug Tracker & Wiki blackhole at torproject.org
Tue Aug 19 01:23:41 UTC 2014


#10281: Investigate usage of alternate memory allocators and memory hardening
options
-------------------------+-------------------------------------------------
     Reporter:           |      Owner:
  mikeperry              |     Status:  new
         Type:           |  Milestone:
  enhancement            |    Version:
     Priority:  major    |   Keywords:  gitian, tbb-security-hardening,
    Component:  Tor      |  tbb-firefox-patch
  Browser                |  Parent ID:
   Resolution:           |
Actual Points:           |
       Points:           |
-------------------------+-------------------------------------------------

Comment (by mikeperry):

 Just a note to mention that the memory tags from about:memory may be
 useful for initial partitioning with PartitionAlloc, but we may need to
 special case some of that. For instance, ArrayBuffers are a popular target
 for setting up UAF exploitation, and probably need a special partition, as
 do certain DOM/iframe objects (see http://robert.ocallahan.org/2010/10
 /mitigating-dangling-pointer-bugs-using_15.html).

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/10281#comment:10>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list