Add Memory Tagging Extension (MTE) Support for ARMv9 devices #106
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
|
I found the commit description excessively long. I don't know what you think, but I'm used to shorter and more to-the-point commits. |
PatrykMis
force-pushed
the
features/mte-support
branch
from
0ffb6cd to
5fe475b
Compare
|
Ok, updated. Let the description stay in this pull request, it will be enough I think. |
Signed-off-by: Patryk Miś <[email protected]>
PatrykMis
force-pushed
the
features/mte-support
branch
from
5fe475b to
d980a00
Compare
|
@PatrykMis You tested it on a compatible device, right? |
|
Yes, of course. On my Pixel 8 using GrapheneOS. I would not open PR unless I test first (except draft PRs). |
|
@PatrykMis Good, sorry for the question. |
Irineu333
approved these changes
Nov 27, 2023
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Description
Introduce Memory Tagging Extension (MTE) to enhance application security and detect memory-related issues on supported devices with Android 14+.
This commit implements MTE, a hardware-based memory safety feature, to help identify and prevent memory corruption issues, such as buffer overflows and use-after-free vulnerabilities. ARM memory tagging support provides a limited form of memory safety for both memory unsafe languages (C, C++) and the small subset of unsafe code in memory safe languages (Rust, Java, Kotlin).
MTE leverages hardware-based memory tagging to associate metadata with each memory allocation, enabling runtime detection of out-of-bounds accesses. This proactive approach enhances the robustness of our application, making it more resistant to memory-related security vulnerabilities.
MTE is supported on platforms that provide ARMv8.5-A (and up) architecture (devices such as Pixel 8/8 Pro) with MTE capabilities. This addition ensures our application can take advantage of the latest hardware security features for a more secure and reliable user experience.
More info: https://community.arm.com/arm-community-blogs/b/operating-systems-blog/posts/new-mte-user-guide