Heap-Based-Overflows
From OSDev Wiki
|
This page is a work in progress! |
Heap based overflows are fundamentally different from stack-based ones and are specific to each allocator. You can help to detect heap based overflows inside your operating system by setting "posion values" for each member of control structures on free and allocation and checking them before operations. Linux takes this approach (see LIST_POISON and LIST_POISION1 [1] ) and I believe JamesM does also in his series on rolling your own unix clone.
