3 ms·

> "as popular and user-friendly as sanitizers" solution for critical and performance-hungry applications. Google just did enable Memory Tagging Extension (ARM'

> "as popular and user-friendly as sanitizers" solution for critical and performance-hungry applications. Google just did enable Memory Tagging Extension (ARM's hardware accelerated sanitizers) on the Pixels last year. May be sanitizing ISAs offer hope?

lifthrasiir 3y ago
MTE is good to have, but it only reduces the probability of successful attacks (by a factor of 16). If the process is allowed to segfault multiple times attackers have a good chance to work around MTE.
- ignoramous 3y ago
  That's a general limitation with tagged pointers, I belive? Have you come across demonstrations of such exploits?
akyuu 3y ago
Do you have a source for that? AFAIK Pixel 7 uses an ARM v8.2 CPU, which doesn't support MTE. The upcoming Pixel 8 might support it, but Google hasn't announced anything yet.
- ignoramous 3y ago
  I'm going by the bugreports I see for a FOSS app I develop: https://github.com/celzero/rethink-app/issues/962 https://github.com/celzero/rethink-app/issues/962 See: https://source.android.com/docs/security/test/memory-safety/arm-mte https://source.android.com/docs/security/test/memory-safety/...