Analysis, publications and threat intelligence for Sectreme customers and the community

RESEARCH LABS

debugging, analysis Srdjan Rajcevic debugging, analysis Srdjan Rajcevic

Prevention and detection of heap corruption and memory leakage with OpenBSD’s memory allocator security mitigations

Better design choice would be to randomize the allocation and scatter those pages and chunks throughout the process’s virtual memory space but there’s a price to pay: random allocation requires separate data structure holding those addresses and now allocator has to deal both with memory objects as well as their meta data each time malloc(3) and free(3) is called which certainly reflects on the performance.

Read More