DynamoRIO / DynamoRIO/dynamorio

Handle tagged addresses

Open
#7,364 2 comments 0 reactions 0 assignees View on GitHub
Dominant language
C
Stars
3.2k
Forks
629
Avg merge
2d 15h
Merged PRs (30d)
31

Description

`FEAT_MTE` and `FEAT_TBI` allow applications to insert tags into the high bits of addresses which will be ignored (TBI) or verified (MTE) by hardware. We need to make sure DynamoRIO can handle apps which use these features.

Some areas that have already been identified that need special handling:

- code cache tags

- mmap/mprotect/etc syscall handling when called with a tagged address

- drmemtrace offline trace format assumes address bits 48..63 are always identical (see [trace_entry.h:913](https://github.com/DynamoRIO/dynamorio/blob/54d45da5b796eb280c856daf04cb4cf823c70e22/clients/drcachesim/common/trace_entry.h#L913))

Android 11+ uses a tagging heap allocator by default: https://source.android.com/docs/security/test/scudo

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.