Comprehensive Memory Error Protection via Diversity and Taint-Tracking
Lorenzo Cavallaro · 2008
A memory error occurs when an object accessed using a pointerexpression is di erent from the one intended (the referent)Out-of-bounds access (e.g., bu er overow)Access using a corrupted pointers (e.g., bu er overow,format bug)Uninitialized pointer access, dangling pointers, ...Memory error exploitation generally relies onData corruptionGathering information on memory location addresses