Memory Tagging Extension: Enhancing memory safety through architecture

guest · Aug 5, 2019

Memory Tagging Extension: Enhancing memory safety through architecture
Google, Arm team up to tackle memory vulnerabilities
August 5, 2019
https://community.arm.com/developer...cessors-ip-blog/posts/enhancing-memory-safety

Memory safety has been a major source of security vulnerabilities for decades. Today, software vendors report that vulnerabilities due to violations of memory safety account for most of the security issues in their products. This is supported by the research.
The Google announcement
Only recently, Google announced that it is adopting Arm’s MTE in Android. This is exciting news, with Google showing its continued commitment to security in the Android ecosystem. It also shows the strength of our MTE offering, with the article stating that the technology makes “it very hard (if not impossible) to exploit memory bugs.”
Memory safety violations
There are two main types of memory safety violations: spatial and temporal safety. MTE provides the mechanism to detect both types in production code with no instrumentation.
Click to expand...

Google Security Blog: Adopting the Arm Memory Tagging Extension in Android

ZDNet: Google, Arm team up to tackle memory vulnerabilities through MTE

Arm has published a whitepaper documenting the applications of MTE.

Google is now working with Arm System On Chip (SoC) vendors to test MTE support for the Android software stack.
"We believe that memory tagging will detect the most common classes of memory safety bugs in the wild, helping vendors identify and fix them, discouraging malicious actors from exploiting them," the tech giant says. "We are considering MTE as a possible foundational requirement for certain tiers of Android devices."
Click to expand...

BoerenkoolMetWorst · Sep 24, 2023

Summary: MTE As Implemented

In mid-2022, Project Zero was provided with access to pre-production hardware implementing the ARM MTE specification. This blog post series is based on that review, and includes general conclusions about the effectiveness of MTE as implemented, specifically in the context of preventing the exploitation of memory-safety vulnerabilities.

Despite its limitations, MTE is still by far the most promising path forward for improving C/C++ software security in 2023.
Click to expand...

https://googleprojectzero.blogspot.com/2023/08/summary-mte-as-implemented.html

Log in or Sign up

Memory Tagging Extension: Enhancing memory safety through architecture

guest Guest

BoerenkoolMetWorst Registered Member

Log in or Sign up

Memory Tagging Extension: Enhancing memory safety through architecture

guest Guest

BoerenkoolMetWorst Registered Member

Useful Searches