Excited to share our latest post on memory safety! We're tackling spatial safety in our massive C++ codebase by hardening libc++ *by default*. It adds bounds checks to things like std::vector, preventing a fair bit of out-of-bounds vulnerabilities: security.googleblog.com/2024/11/retrof…
Nov 15, 2024 · 6:57 PM UTC
2
48
246
77,454
This improves spatial memory safety across Google's services, including performance-critical components of Search, Gmail, Drive, YouTube, and Maps. We've already seen it disrupt a red team exercise, reduce segfaults by 30%, and improve code correctness.
2
4
43
27,681
@ayper Does OOB access yield an abort or an unwinding exception?
1
0
5
400
@kupiakos Oops, I missed this. OOB accesses terminate the program immediately. See libcxx.llvm.org/Hardening.html…
0
0
1
113