[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: [tor-bugs] #10281 [Tor Browser]: Investigate usage of alternate memory allocators and memory hardening options

#10281: Investigate usage of alternate memory allocators and memory hardening
options
-------------------------+-------------------------------------------------
     Reporter:           |      Owner:
  mikeperry              |     Status:  new
         Type:           |  Milestone:
  enhancement            |    Version:
     Priority:  major    |   Keywords:  gitian, tbb-security-hardening,
    Component:  Tor      |  tbb-firefox-patch
  Browser                |  Parent ID:
   Resolution:           |
Actual Points:           |
       Points:           |
-------------------------+-------------------------------------------------

Comment (by tom):

 For lack of a better place to store these, here are some good blog posts
 on IE's technique(s):

  * http://researchcenter.paloaltonetworks.com/2014/07/beginning-end-use-
 free-exploitation/
  * https://labs.mwrinfosecurity.com/blog/2014/06/20/isolated-heap-friends
 ---object-allocation-hardening-in-web-browsers/
  * http://blog.fortinet.com/post/is-use-after-free-exploitation-dead-the-
 new-ie-memory-protector-will-tell-you

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/10281#comment:11>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs