| commit | b75822bc6e5cbbf463c611d8dea32857f8de9d3e | [log] [tgz] |
|---|---|---|
| author | Qi Wang <interwq@gwu.edu> | Mon Oct 18 17:33:15 2021 -0700 |
| committer | Qi Wang <interwq@gmail.com> | Wed Dec 29 14:44:43 2021 -0800 |
| tree | 3bb49cc57aea382bac754bab6eecbf8c0acdce53 | |
| parent | 06aac61c4b261e5d1c8dcf3c7dd7921e9e395d62 [diff] |
Implement use-after-free detection using junk and stash. On deallocation, sampled pointers (specially aligned) get junked and stashed into tcache (to prevent immediate reuse). The expected behavior is to have read-after-free corrupted and stopped by the junk-filling, while write-after-free is checked when flushing the stashed pointers.