3 ms·
Or you can put in a memory area with unmapped sections on both sides if you are paranoid.
by justincormack 13y ago
Or you can put in a memory area with unmapped sections on both sides if you are paranoid.
- apaprocki 13y agoTrue.. I wonder if any specs/certifications actually require something like that. Typically I mostly use tricks like that to track down bugs, but there's nothing wrong with using it in production for something like a single key/cert alloc. It becomes a bit unwieldy if you have lots of things to protect. (Especially on machines with 64k pages :))
- justincormack 13y agoWell it seems like Akamai were doing exactly that. If you have lots I would go multi process though. Someone else who uses Powerpc?
- Shish2k 13y agoIIRC openbsd's malloc does something like that by default, so every bit of data gets its own protected address space... and then the openssl guys built their own malloc without that feature, to get better performance :(