Search results

SROP mitigation with SipHash-generated cookies

priority-low

type-enhancement

Status: Open.

#74 In GrapheneOS/linux-hardened;

· thestinger opened on Feb 27, 2018

type-based CFI for returns

type-enhancement

Status: Open.

#66 In GrapheneOS/linux-hardened;

· thestinger opened on Nov 22, 2017

stack clearing

status-in-progress-elsewhere

type-enhancement

Status: Open.

#64 In GrapheneOS/linux-hardened;

· thestinger opened on Nov 22, 2017

struct layout randomization for Clang

type-enhancement

Status: Open.

#57 In GrapheneOS/linux-hardened;

· thestinger opened on Oct 8, 2017

extend SELinux memory protections to have parity with PaX MPROTECT

type-enhancement

Status: Open.

#52 In GrapheneOS/linux-hardened;

· thestinger opened on Aug 15, 2017

RANDKSTACK for arm64

priority-low

type-enhancement

Status: Open.

#45 In GrapheneOS/linux-hardened;

· thestinger opened on Jun 13, 2017

slab FIFO / randomized quarantine (not tied to ASan)

type-enhancement

Status: Open.

#44 In GrapheneOS/linux-hardened;

· thestinger opened on Jun 9, 2017

improve slub canary generation

type-enhancement

Status: Open.

#37 In GrapheneOS/linux-hardened;

· thestinger opened on May 21, 2017

improve the robustness of slub page freelists

type-enhancement

Status: Open.

#36 In GrapheneOS/linux-hardened;

· thestinger opened on May 20, 2017

scope out targeted usage of non-heuristic-based integer overflow checking

type-research

Status: Open.

#35 In GrapheneOS/linux-hardened;

· thestinger opened on May 18, 2017

scope out targeted usage of the bounds and object-size sanitizers

type-research

Status: Open.

#34 In GrapheneOS/linux-hardened;

· thestinger opened on May 18, 2017

brute force protection

type-enhancement

Status: Open.

#15 In GrapheneOS/linux-hardened;

· thestinger opened on May 11, 2017