DynamoRIO / DynamoRIO/dynamorio
Handle tagged addresses
- Dominant language
- C
- Stars
- 3.2k
- Forks
- 629
- Avg merge
- 2d 15h
- Merged PRs (30d)
- 31
Description
`FEAT_MTE` and `FEAT_TBI` allow applications to insert tags into the high bits of addresses which will be ignored (TBI) or verified (MTE) by hardware. We need to make sure DynamoRIO can handle apps which use these features.
Some areas that have already been identified that need special handling:
- code cache tags
- mmap/mprotect/etc syscall handling when called with a tagged address
- drmemtrace offline trace format assumes address bits 48..63 are always identical (see [trace_entry.h:913](https://github.com/DynamoRIO/dynamorio/blob/54d45da5b796eb280c856daf04cb4cf823c70e22/clients/drcachesim/common/trace_entry.h#L913))
Android 11+ uses a tagging heap allocator by default: https://source.android.com/docs/security/test/scudo
Contributor guide
Assessment
This issue has not been assessed yet.