4 ms·
An adversary can turn a double free into a use after free by causing an object to be allocated in-between the two free operations at the same address
by dwattttt 3y ago
An adversary can turn a double free into a use after free by causing an object to be allocated in-between the two free operations at the same address
- tgv 3y agoYou can't free a buffer/object twice in the proposal. After a free, you can't use the pointer any longer. But it might very well be that this approach is not hard enough for use in e.g. the kernel. It might still be useful for userland applications, though.