[OOPSLA23] Fat Pointers for Temporal Memory Safety of C

Описание: Fat Pointers for Temporal Memory Safety of C (Video, OOPSLA1 2023)
Jie Zhou, John Criswell, and Michael Hicks
(University of Rochester, USA; University of Rochester, USA; Amazon, USA / University of Maryland, USA)

Abstract: Temporal memory safety bugs, especially use-after-free and double free bugs, pose a major security threat to C programs. Real-world exploits utilizing these bugs enable attackers to read and write arbitrary memory locations, causing disastrous violations of confidentiality, integrity, and availability. Many previous solutions retrofit temporal memory safety to C, but they all either incur high performance overhead and/or miss detecting certain types of temporal memory safety bugs.


In this paper, we propose a temporal memory safety solution that is both efficient and comprehensive. Specifically, we extend Checked C, a spatially-safe extension to C, with temporally-safe pointers. These are implemented by combining two techniques: fat pointers and dynamic key-lock checks. We show that the fat-pointer solution significantly improves running time and memory overhead compared to the disjoint-metadata approach that provides the same level of protection. With empirical program data and hands-on experience porting real-world applications, we also show that our solution is practical in terms of backward compatibility---one of the major complaints about fat pointers.

Article: https://doi.org/10.1145/3586038

Supplementary archive: https://doi.org/10.5281/zenodo.7719431 (Badges: Artifacts Available, Artifacts Evaluated — Functional)

ORCID: https://orcid.org/0000-0001-7493-2212, https://orcid.org/0000-0003-2176-3659, https://orcid.org/0000-0002-2759-9223

Video Tags: Temporal Memory Safety, Fat Pointers, Checked C, oopslaa23main-p64-p, doi:10.1145/3586038, doi:10.5281/zenodo.7719431, orcid:0000-0001-7493-2212, orcid:0000-0003-2176-3659, orcid:0000-0002-2759-9223, Artifacts Available, Artifacts Evaluated — Functional

Presentation at the OOPSLA1 2023 conference, October 22–27, 2023, https://2023.splashcon.org/track/spla...
Sponsored by ACM SIGPLAN,