audk/MdeModulePkg/Core/Dxe/Mem
Jian J Wang 63ebde8ef6 MdeModulePkg/Core: add freed-memory guard feature
Freed-memory guard is used to detect UAF (Use-After-Free) memory issue
which is illegal access to memory which has been freed. The principle
behind is similar to pool guard feature, that is we'll turn all pool
memory allocation to page allocation and mark them to be not-present
once they are freed.

This also implies that, once a page is allocated and freed, it cannot
be re-allocated. This will bring another issue, which is that there's
risk that memory space will be used out. To address it, the memory
service add logic to put part (at most 64 pages a time) of freed pages
back into page pool, so that the memory service can still have memory
to allocate, when all memory space have been allocated once. This is
called memory promotion. The promoted pages are always from the eldest
pages which haven been freed.

This feature brings another problem is that memory map descriptors will
be increased enormously (200+ -> 2000+). One of change in this patch
is to update MergeMemoryMap() in file PropertiesTable.c to allow merge
freed pages back into the memory map. Now the number can stay at around
510.

Cc: Star Zeng <star.zeng@intel.com>
Cc: Michael D Kinney <michael.d.kinney@intel.com>
Cc: Jiewen Yao <jiewen.yao@intel.com>
Cc: Ruiyu Ni <ruiyu.ni@intel.com>
Cc: Laszlo Ersek <lersek@redhat.com>
Contributed-under: TianoCore Contribution Agreement 1.1
Signed-off-by: Jian J Wang <jian.j.wang@intel.com>
Reviewed-by: Star Zeng <star.zeng@intel.com>
2018-10-26 10:30:35 +08:00
..
HeapGuard.c MdeModulePkg/Core: add freed-memory guard feature 2018-10-26 10:30:35 +08:00
HeapGuard.h MdeModulePkg/Core: add freed-memory guard feature 2018-10-26 10:30:35 +08:00
Imem.h MdeModulePkg: Fix unix style of EOL 2017-11-21 20:24:37 +08:00
MemData.c Update the copyright notice format 2010-04-24 09:49:11 +00:00
MemoryProfileRecord.c MdeModulePkg: remove PE/COFF header workaround for ELILO on IPF 2018-09-24 16:56:32 +02:00
Page.c MdeModulePkg/Core: add freed-memory guard feature 2018-10-26 10:30:35 +08:00
Pool.c MdeModulePkg/Core: add freed-memory guard feature 2018-10-26 10:30:35 +08:00