TAILCHECK - A Lightweight Heap Overflow Detection Mechanism with Page Protection and Tagged Pointers

Explore a 15-minute conference talk from OSDI '23 that introduces TAILCHECK, a novel lightweight heap overflow detection mechanism. Learn about the challenges of detecting heap overflow vulnerabilities in real-world programs and how TAILCHECK leverages page protection and pointer tagging to address this issue. Discover how TAILCHECK allocates page-protected shadow objects called TailObjects and uses pointer tagging to detect heap overflows as page faults. Examine the evaluation results of TAILCHECK on server applications and SPEC CPU benchmarks, including its success in finding heap overflows in SPEC CPU2017 gcc. Gain insights into TAILCHECK's performance, with low run-time overhead for server applications and significant improvements over state-of-the-art solutions for SPEC CPU benchmarks.

OSDI '23 - TAILCHECK: A Lightweight Heap Overflow Detection Mechanism with Page Protection and...