]> git.ipfire.org Git - thirdparty/glibc.git/commit
cheri: malloc: Disable pointer protection
authorSzabolcs Nagy <szabolcs.nagy@arm.com>
Wed, 7 Jul 2021 13:21:40 +0000 (14:21 +0100)
committerSzabolcs Nagy <szabolcs.nagy@arm.com>
Fri, 5 Aug 2022 18:45:19 +0000 (19:45 +0100)
commitb3d26f52f7084c1f008b3c746c01db4f122f7879
treed111fc92953b9c425f032b88a5100b9bb32aecaa
parent0205012984bc65f70d6324d9bc2338b7b23f4533
cheri: malloc: Disable pointer protection

Such arithmetic invalidates capabilities so this security measure does
not work for CHERI.

Note: the architecture makes it hard to corrupt pointers in malloc
metadata, but not impossible: current allocation bounds include the
metadata and capabilities are not revoked after free. These issues can
be fixed by a capability aware malloc.
malloc/malloc.c