{"id":113077,"date":"2024-01-23T17:28:02","date_gmt":"2024-01-23T15:28:02","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/oczenka-effektivnosti-primeneniya-miracleptr-dlya-predotvrashheniya-uyazvimostej-v-chrome"},"modified":"2024-01-23T17:28:02","modified_gmt":"2024-01-23T15:28:02","slug":"oczenka-effektivnosti-primeneniya-miracleptr-dlya-predotvrashheniya-uyazvimostej-v-chrome","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/news\/oczenka-effektivnosti-primeneniya-miracleptr-dlya-predotvrashheniya-uyazvimostej-v-chrome","title":{"rendered":"MiraclePtr'i kasulike t\u00f5hususe hindamine Chrome'i haavatavuste v\u00e4ltimisele","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Google on anal\u00fc\u00fcsinud MiraclePtr (raw_ptr<T>) t\u00fc\u00fcbi kasutamise efektiivsust C++ koodis, et kaitsta haavatavuste eest, mis on p\u00f5hjustatud juba vabastatud m\u00e4lupiirkondadele juurdep\u00e4\u00e4sust (use-after-free). MiraclePtr pakub m\u00e4lun\u00e4idikute kohalduse, mis teeb lisakontrolle ja l\u00f5petab t\u00f6\u00f6 h\u00e4daolukordades, kui avastatakse juurdep\u00e4\u00e4s vabastatud m\u00e4lupiirkondadele. MiraclePtr toetust hakati vaikimisi kasutama Windowsi ja Androidi platvormidel mai 2022 (Chrome 102) ning ChromeOS, Linuxi ja macOS platvormidel juuni 2023. MiraclePtr baasil kaitse Chrome'is kehtib k\u00f5igile protsessidele, v\u00e4lja arvatud renderdamise protsess. <\/p>\n

P\u00e4rast haavatavuste raportite ning h\u00e4daseisude anal\u00fc\u00fcsi, samuti turvaincidentide ja fuzzing-testimise tulemuste uurimist j\u00f5uti j\u00e4reldusele, et MiraclePtr'i rakendamine pakkus kaitset 57% haavatavuste klassi use-after-free eest, t\u00e4nu MiraclePtr'i kasutusele klassi v\u00e4ljade ja callback-kutsumiste parameetritel. Samuti mainitakse, et 5 kuuest tuvastatud kriitilisest haavatavusest eelmisel aastal stabiilses Chrome'i haru olid tuvastatud t\u00e4nu h\u00e4daseisude raportite uurimisele, mis olid seotud MiraclePtr'i kasutamisega. <\/p>\n

MiraclePtr'i kasutamise hind on suurenenud m\u00e4lutarve, kuna m\u00e4lun\u00e4idikute jaoks tuleb salvestada t\u00e4iendavad 4 baiti viitide loenduri jaoks. P\u00f5hiprotsessi m\u00e4lutarve brauseris MiraclePtr'i kasutamisel suureneb 5,5-8% lauaarvutite kogustes ja 2% Androidi versioonis. K\u00f5igi protsesside keskmine tarbimise suurenemine on hinnanguliselt 1-3%. Lisaks on MiraclePtr'i kasutamisel tuvastatud eraldi regressioonid, mis p\u00f5hjustavad j\u00f5udluse v\u00e4henemist, kuid ei ole seotud peamiste m\u00f5\u00f5dikute, nagu lehe laadimise ja renderdamise aeg, halvenemisega. Tuvastatud regressioonid h\u00f5lmavad 1,5% sisestamise viivitust Chrome OS-is, 1,5% aeglustumist vahelehtede avamisel Androidi platvormil ning suurenenud sisestamise viivituse t\u00f5en\u00e4osust, mis on seotud p\u00f5hivoogude konkurentsiga (10%-line t\u00f5en\u00e4osuse suurenemine 99. protsentiilis).
\n
Allikas: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u043f\u0440\u043e\u0430\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0432 \u043a\u043e\u0434\u0435 \u043d\u0430 \u044f\u0437\u044b\u043a\u0435 \u0421++ \u0442\u0438\u043f\u0430 MiraclePtr (raw_ptr<T>) \u0432\u043c\u0435\u0441\u0442\u043e \u043e\u0431\u044b\u0447\u043d\u044b\u0445 \u0443\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u0435\u0439 \u0434\u043b\u044f \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432\u044b\u0437\u0432\u0430\u043d\u043d\u044b\u0445 \u043e\u0431\u0440\u0430\u0449\u0435\u043d\u0438\u0435\u043c \u043a \u0443\u0436\u0435 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0451\u043d\u043d\u044b\u043c \u043e\u0431\u043b\u0430\u0441\u0442\u044f\u043c \u043f\u0430\u043c\u044f\u0442\u0438 (use-after-free). MiraclePtr \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u043e\u0431\u0432\u044f\u0437\u043a\u0443 \u043d\u0430\u0434 \u0443\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044f\u043c\u0438, \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u044e\u0449\u0443\u044e \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0438 \u0430\u0432\u0430\u0440\u0438\u0439\u043d\u043e \u0437\u0430\u0432\u0435\u0440\u0448\u0430\u044e\u0449\u0443\u044e \u0440\u0430\u0431\u043e\u0442\u0443 \u0432 \u0441\u043b\u0443\u0447\u0430\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u043e\u0431\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u043a \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0451\u043d\u043d\u044b\u043c \u043e\u0431\u043b\u0430\u0441\u0442\u044f\u043c \u043f\u0430\u043c\u044f\u0442\u0438. \u041f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 MiraclePtr \u0431\u044b\u043b\u0430 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0430 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u043d\u0430 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-113077","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47 MiraclePtri kasutamise t\u00f5hususe hindamine haavatavuste ennetamiseks Chrome'is | ProHoster","description":"Google on anal\u00fc\u00fcsinud C++-koodis MiraclePtr (raw_ptr) t\u00fc\u00fcbi kasutamise efektiivsust tavap\u00e4raste pointerite asemel, et kaitsta juba vabastatud m\u00e4lupiirkondadega seotud haavatavuste eest.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/news\/oczenka-effektivnosti-primeneniya-miracleptr-dlya-predotvrashheniya-uyazvimostej-v-chrome","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041e\u0446\u0435\u043d\u043a\u0430 \u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438 \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u044f MiraclePtr \u0434\u043b\u044f \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 Chrome | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u043f\u0440\u043e\u0430\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0432 \u043a\u043e\u0434\u0435 \u043d\u0430 \u044f\u0437\u044b\u043a\u0435 \u0421++ \u0442\u0438\u043f\u0430 MiraclePtr (raw_ptr) \u0432\u043c\u0435\u0441\u0442\u043e \u043e\u0431\u044b\u0447\u043d\u044b\u0445 \u0443\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u0435\u0439 \u0434\u043b\u044f \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432\u044b\u0437\u0432\u0430\u043d\u043d\u044b\u0445 \u043e\u0431\u0440\u0430\u0449\u0435\u043d\u0438\u0435\u043c \u043a \u0443\u0436\u0435 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0451\u043d\u043d\u044b\u043c \u043e\u0431\u043b\u0430\u0441\u0442\u044f\u043c.","og:url":"https:\/\/prohoster.info\/et\/blog\/news\/oczenka-effektivnosti-primeneniya-miracleptr-dlya-predotvrashheniya-uyazvimostej-v-chrome","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-01-23T15:28:02+00:00","article:modified_time":"2024-01-23T15:28:02+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/113077","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=113077"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/113077\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=113077"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=113077"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=113077"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}