mirror of
https://github.com/RGBCube/serenity
synced 2025-05-14 22:24:57 +00:00
b6d4eea7ac
Instead of returning HeapBlock memory to the kernel (or a non-type specific shared cache), we now keep a BlockAllocator per CellAllocator and implement "deallocation" by basically informing the kernel that we don't need the physical memory right now. This is done with MADV_FREE or MADV_DONTNEED if available, but for other platforms (including SerenityOS) we munmap and then re-mmap the memory to achieve the same effect. It's definitely clunky, so I've added a FIXME about implementing the madvise options on SerenityOS too. The important outcome of this change is that GC types that use a type-specific allocator become immune to use-after-free type confusion attacks, since their virtual addresses will only ever be re-used for the same exact type again and again. Fixes #22274
26 lines
407 B
C++
26 lines
407 B
C++
/*
|
|
* Copyright (c) 2021-2023, Andreas Kling <kling@serenityos.org>
|
|
*
|
|
* SPDX-License-Identifier: BSD-2-Clause
|
|
*/
|
|
|
|
#pragma once
|
|
|
|
#include <AK/Vector.h>
|
|
#include <LibJS/Forward.h>
|
|
|
|
namespace JS {
|
|
|
|
class BlockAllocator {
|
|
public:
|
|
BlockAllocator() = default;
|
|
~BlockAllocator();
|
|
|
|
void* allocate_block(char const* name);
|
|
void deallocate_block(void*);
|
|
|
|
private:
|
|
Vector<void*> m_blocks;
|
|
};
|
|
|
|
}
|