[PATCH v2 2/2] initmem: introduce CONFIG_INIT_ALL_HEAP
    Kees Cook 
    keescook at chromium.org
       
    Mon Apr  8 17:14:45 UTC 2019
    
    
  
On Mon, Apr 8, 2019 at 9:43 AM Laura Abbott <labbott at redhat.com> wrote:
> I've looked at doing something similar in the past (failing to find
> the thread this morning...) and while this will work, it has pretty
> serious performance issues. It's not actually the poisoning which
> is expensive but that turning on debugging removes the cpu slab
> which has significant performance penalties.
>
> I'd rather go back to the proposal of just poisoning the slab
> at alloc/free without using SLAB_POISON.
I still agree this would make the most sense. Fundamentally it's not a
debugging feature.
-- 
Kees Cook
    
    
More information about the Linux-security-module-archive
mailing list