{"id":113077,"date":"2024-01-23T17:28:02","date_gmt":"2024-01-23T15:28:02","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/oczenka-effektivnosti-primeneniya-miracleptr-dlya-predotvrashheniya-uyazvimostej-v-chrome"},"modified":"2024-01-23T17:28:02","modified_gmt":"2024-01-23T15:28:02","slug":"oczenka-effektivnosti-primeneniya-miracleptr-dlya-predotvrashheniya-uyazvimostej-v-chrome","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/news\/oczenka-effektivnosti-primeneniya-miracleptr-dlya-predotvrashheniya-uyazvimostej-v-chrome","title":{"rendered":"Hodnocen\u00ed \u00fa\u010dinnosti pou\u017eit\u00ed MiraclePtr pro prevenci zranitelnost\u00ed v Chrome","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Spole\u010dnost Google analyzovala efektivitu pou\u017eit\u00ed v k\u00f3du jazyka C++ typu MiraclePtr (raw_ptr<T>) m\u00edsto b\u011b\u017en\u00fdch ukazatel\u016f pro ochranu p\u0159ed zranitelnostmi zp\u016fsoben\u00fdmi p\u0159\u00edstupem do ji\u017e uvoln\u011bn\u00fdch oblast\u00ed pam\u011bti (use-after-free). MiraclePtr poskytuje ob\u00e1lku nad ukazateli, kter\u00e1 prov\u00e1d\u00ed dodate\u010dn\u00e9 kontroly a nouzov\u011b ukon\u010duje pr\u00e1ci v p\u0159\u00edpad\u011b zji\u0161t\u011bn\u00ed p\u0159\u00edstupu do uvoln\u011bn\u00fdch oblast\u00ed pam\u011bti. Podpora MiraclePtr byla v dubnu 2022 v\u00fdchoz\u00ed na platform\u00e1ch Windows a Android (ve verzi Chrome 102) a na platform\u00e1ch ChromeOS, Linux a macOS v \u010dervnu 2023. Ochrana zalo\u017een\u00e1 na MiraclePtr v Chromu se pou\u017e\u00edv\u00e1 pro v\u0161echny procesy krom\u011b procesu zaji\u0161\u0165uj\u00edc\u00edho vykreslov\u00e1n\u00ed (renderer). <\/p>\n

Po studiu dynamiky zas\u00edl\u00e1n\u00ed zpr\u00e1v o zranitelnostech a nouzov\u00fdch ukon\u010den\u00edch pr\u00e1ce, stejn\u011b jako anal\u00fdze incident\u016f souvisej\u00edc\u00edch s bezpe\u010dnost\u00ed a v\u00fdsledk\u016f fuzzingov\u00e9ho testov\u00e1n\u00ed, bylo konstatov\u00e1no, \u017ee zaveden\u00ed MiraclePtr poskytlo ochranu proti 57 % zranitelnost\u00ed t\u0159\u00eddy use-after-free d\u00edky p\u0159echodu na pou\u017eit\u00ed MiraclePtr pro pole t\u0159\u00edd a parametry callbackov\u00fdch vol\u00e1n\u00ed. Krom\u011b toho se uv\u00e1d\u00ed, \u017ee 5 z 6 zji\u0161t\u011bn\u00fdch kritick\u00fdch zranitelnost\u00ed v stabiln\u00ed v\u011btvi Chromu za lo\u0148sk\u00fd rok bylo identifikov\u00e1no d\u00edky studiu zpr\u00e1v o nouzov\u00fdch ukon\u010den\u00edch souvisej\u00edc\u00edch s pou\u017eit\u00edm MiraclePtr. <\/p>\n

Cena pou\u017eit\u00ed MiraclePtr spo\u010d\u00edv\u00e1 ve zv\u00fd\u0161en\u00ed spot\u0159eby pam\u011bti, proto\u017ee pro ukazatele je t\u0159eba uchov\u00e1vat nav\u00edc 4 byty se \u010d\u00edta\u010dem referenc\u00ed. Spot\u0159eba pam\u011bti hlavn\u00edm procesem prohl\u00ed\u017ee\u010de p\u0159i pou\u017eit\u00ed MiraclePtr se zvy\u0161uje o 5,5-8 % ve verz\u00edch pro desktopov\u00e9 syst\u00e9my a o 2 % ve verzi pro Android. Pr\u016fm\u011brn\u00e9 zv\u00fd\u0161en\u00ed spot\u0159eby pro v\u0161echny procesy je odhadov\u00e1no na 1-3 %. Krom\u011b toho byly p\u0159i pou\u017e\u00edv\u00e1n\u00ed MiraclePtr zaznamen\u00e1ny jednotliv\u00e9 regrese, kter\u00e9 vedly ke sn\u00ed\u017een\u00ed v\u00fdkonu, av\u0161ak neovlivnily kl\u00ed\u010dov\u00e9 metriky, jako jsou doba na\u010d\u00edt\u00e1n\u00ed a vykreslov\u00e1n\u00ed str\u00e1nky. Mezi zji\u0161t\u011bn\u00e9 regrese pat\u0159\u00ed zpo\u017ed\u011bn\u00ed o 1,5 % prvn\u00edho vstupu v Chrome OS, zpomalen\u00ed o 1,5 % p\u0159i otev\u00edr\u00e1n\u00ed z\u00e1lo\u017eek na platform\u011b Android a tak\u00e9 zv\u00fd\u0161en\u00ed pravd\u011bpodobnosti zpo\u017ed\u011bn\u00ed vstupu zp\u016fsoben\u00e9ho konkurenc\u00ed v hlavn\u00edm vl\u00e1kn\u011b (zv\u00fd\u0161en\u00ed pravd\u011bpodobnosti o 10 % v 99. percentilu).
\n
Zdroj: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u043f\u0440\u043e\u0430\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0432 \u043a\u043e\u0434\u0435 \u043d\u0430 \u044f\u0437\u044b\u043a\u0435 \u0421++ \u0442\u0438\u043f\u0430 MiraclePtr (raw_ptr<T>) \u0432\u043c\u0435\u0441\u0442\u043e \u043e\u0431\u044b\u0447\u043d\u044b\u0445 \u0443\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u0435\u0439 \u0434\u043b\u044f \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432\u044b\u0437\u0432\u0430\u043d\u043d\u044b\u0445 \u043e\u0431\u0440\u0430\u0449\u0435\u043d\u0438\u0435\u043c \u043a \u0443\u0436\u0435 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0451\u043d\u043d\u044b\u043c \u043e\u0431\u043b\u0430\u0441\u0442\u044f\u043c \u043f\u0430\u043c\u044f\u0442\u0438 (use-after-free). MiraclePtr \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u043e\u0431\u0432\u044f\u0437\u043a\u0443 \u043d\u0430\u0434 \u0443\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044f\u043c\u0438, \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u044e\u0449\u0443\u044e \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0438 \u0430\u0432\u0430\u0440\u0438\u0439\u043d\u043e \u0437\u0430\u0432\u0435\u0440\u0448\u0430\u044e\u0449\u0443\u044e \u0440\u0430\u0431\u043e\u0442\u0443 \u0432 \u0441\u043b\u0443\u0447\u0430\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u043e\u0431\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u043a \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0451\u043d\u043d\u044b\u043c \u043e\u0431\u043b\u0430\u0441\u0442\u044f\u043c \u043f\u0430\u043c\u044f\u0442\u0438. \u041f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 MiraclePtr \u0431\u044b\u043b\u0430 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0430 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u043d\u0430 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-113077","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Hodnocen\u00ed \u00fa\u010dinnosti pou\u017eit\u00ed MiraclePtr k prevenci zranitelnost\u00ed v prohl\u00ed\u017ee\u010di Chrome | ProHoster","description":"Spole\u010dnost Google analyzovala \u00fa\u010dinnost pou\u017eit\u00ed typu MiraclePtr (raw_ptr) v k\u00f3du v jazyce C++ nam\u00edsto b\u011b\u017en\u00fdch ukazatel\u016f k ochran\u011b p\u0159ed zranitelnostmi vypl\u00fdvaj\u00edc\u00edmi z p\u0159\u00edstupu k ji\u017e uvoln\u011bn\u00fdm oblastem.","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/news\/oczenka-effektivnosti-primeneniya-miracleptr-dlya-predotvrashheniya-uyazvimostej-v-chrome","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041e\u0446\u0435\u043d\u043a\u0430 \u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438 \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u044f MiraclePtr \u0434\u043b\u044f \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 Chrome | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u043f\u0440\u043e\u0430\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0432 \u043a\u043e\u0434\u0435 \u043d\u0430 \u044f\u0437\u044b\u043a\u0435 \u0421++ \u0442\u0438\u043f\u0430 MiraclePtr (raw_ptr) \u0432\u043c\u0435\u0441\u0442\u043e \u043e\u0431\u044b\u0447\u043d\u044b\u0445 \u0443\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u0435\u0439 \u0434\u043b\u044f \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432\u044b\u0437\u0432\u0430\u043d\u043d\u044b\u0445 \u043e\u0431\u0440\u0430\u0449\u0435\u043d\u0438\u0435\u043c \u043a \u0443\u0436\u0435 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0451\u043d\u043d\u044b\u043c \u043e\u0431\u043b\u0430\u0441\u0442\u044f\u043c.","og:url":"https:\/\/prohoster.info\/cs\/blog\/news\/oczenka-effektivnosti-primeneniya-miracleptr-dlya-predotvrashheniya-uyazvimostej-v-chrome","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-01-23T15:28:02+00:00","article:modified_time":"2024-01-23T15:28:02+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/113077","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=113077"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/113077\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=113077"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=113077"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=113077"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}