[HWASAN] Updated HWASAN design document to better portray the chance of missing a bug.

Summary: Provided rule of thumb percentage chances of miss for 4 and 8 bit tag sizes.

Subscribers: cfe-commits

Tags: #clang

Differential Revision: https://reviews.llvm.org/D58195

llvm-svn: 353990
This commit is contained in:
Mitch Phillips 2019-02-13 23:14:54 +00:00
parent e4cfb7dae8
commit b5fe6fdbc4
1 changed files with 2 additions and 1 deletions

View File

@ -131,7 +131,8 @@ HWASAN:
https://www.kernel.org/doc/Documentation/arm64/tagged-pointers.txt).
* **Does not require redzones to detect buffer overflows**,
but the buffer overflow detection is probabilistic, with roughly
`(2**TS-1)/(2**TS)` probability of catching a bug.
`1/(2**TS)` chance of missing a bug (6.25% or 0.39% with 4 and 8-bit TS
respectively).
* **Does not require quarantine to detect heap-use-after-free,
or stack-use-after-return**.
The detection is similarly probabilistic.