• 4 Posts
  • 11 Comments
Joined 1 year ago
cake
Cake day: July 6th, 2023

help-circle














  • Pixel 8 Pro. Google’s current flagship device, arguably the most secure device on the market, and is first to include Memory Tagging Extension (MTE). As such, it is supported by GrapheneOS, which I highly recommend due to the increased security and control over your own phone (starting with sandboxing the Play Store if you use it, and not giving Google full system privileges like stock/OEM OS does).

    When fully integrated into the compiler and each heap allocator, MTE enforces a form of memory safety. It detects memory corruption as it happens. 4 bit tags limit it to probabilistic detection for the general case, but deterministic guarantees are possible via reserving tags.

    In hardened_malloc, we deterministically prevent sequential overflows by excluding adjacent tags. We exclude a tag reserved for free tag and the previous tag used for the previous allocation in the slot to help with use-after-free detection alongside FIFO and random quarantines.

    https://nitter.net/GrapheneOS/status/1716945639198880037