Demystifying the Secure Enclave Processor
LytVKz
LytVKz
You also want an ePaper? Increase the reach of your titles
YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.
Heap Corruptions: malloc()<br />
• No protection of heap metadata<br />
▫ Free list pointers can be overwritten<br />
▫ Block size can be corrupted<br />
• Allocation addresses are predictable<br />
▫ Malloc area embedded by __DATA segment in<br />
application image<br />
▫ Allocations made in sequential order