Re: [PATCH RFC 2/2] lkdtm: Add heap spraying test

2020-08-17 Thread Kees Cook
On Mon, Aug 17, 2020 at 01:24:37PM -0500, Eric W. Biederman wrote: > Alexander Popov writes: > > > Add a simple test for CONFIG_SLAB_QUARANTINE. > > > > It performs heap spraying that aims to reallocate the recently freed heap > > object. This technique is used for exploiting use-after-free > >

Re: [PATCH RFC 2/2] lkdtm: Add heap spraying test

2020-08-17 Thread Eric W. Biederman
Alexander Popov writes: > Add a simple test for CONFIG_SLAB_QUARANTINE. > > It performs heap spraying that aims to reallocate the recently freed heap > object. This technique is used for exploiting use-after-free > vulnerabilities in the kernel code. > > This test shows that

Re: [PATCH RFC 2/2] lkdtm: Add heap spraying test

2020-08-17 Thread Alexander Popov
On 15.08.2020 19:59, Kees Cook wrote: > On Thu, Aug 13, 2020 at 06:19:22PM +0300, Alexander Popov wrote: >> Add a simple test for CONFIG_SLAB_QUARANTINE. >> >> It performs heap spraying that aims to reallocate the recently freed heap >> object. This technique is used for exploiting use-after-free

Re: [PATCH RFC 2/2] lkdtm: Add heap spraying test

2020-08-15 Thread Kees Cook
On Thu, Aug 13, 2020 at 06:19:22PM +0300, Alexander Popov wrote: > Add a simple test for CONFIG_SLAB_QUARANTINE. > > It performs heap spraying that aims to reallocate the recently freed heap > object. This technique is used for exploiting use-after-free > vulnerabilities in the kernel code. > >

[PATCH RFC 2/2] lkdtm: Add heap spraying test

2020-08-13 Thread Alexander Popov
Add a simple test for CONFIG_SLAB_QUARANTINE. It performs heap spraying that aims to reallocate the recently freed heap object. This technique is used for exploiting use-after-free vulnerabilities in the kernel code. This test shows that CONFIG_SLAB_QUARANTINE breaks heap spraying exploitation