SlimGuard

SlimGuard copied to clipboard

Missing error handling for a large allocation

1

Hi. ```c #include #include #include #include #include void* p[256]; uintptr_t buf[256]; int main() { p[0] = malloc(-8); fprintf(stderr, "%p\n", p[0]); } ``` This program will crash if we run it...

insuyun

We (I and @ironore15) According to our evaluation, SlimGuard's invalid check is insufficient. Is it bug? or just design issue? ```c #include #include #include #include #include void* p[256]; uintptr_t buf[256];...

insuyun

I am trying to understand the behaviour of Slimguard during the memory allocations and freeing, but something seems strange. When I requested addresses with a _malloc_ call, for instance 10...

Skyrano