{"id":113077,"date":"2024-01-23T17:28:02","date_gmt":"2024-01-23T15:28:02","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/oczenka-effektivnosti-primeneniya-miracleptr-dlya-predotvrashheniya-uyazvimostej-v-chrome"},"modified":"2024-01-23T17:28:02","modified_gmt":"2024-01-23T15:28:02","slug":"oczenka-effektivnosti-primeneniya-miracleptr-dlya-predotvrashheniya-uyazvimostej-v-chrome","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/news\/oczenka-effektivnosti-primeneniya-miracleptr-dlya-predotvrashheniya-uyazvimostej-v-chrome","title":{"rendered":"Evaluarea eficien\u021bei utiliz\u0103rii MiraclePtr pentru prevenirea vulnerabilit\u0103\u021bilor \u00een Chrome","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Compania Google a analizat eficien\u021ba utiliz\u0103rii \u00een codul scris \u00een C++ a tipului MiraclePtr (raw_ptr<T>) \u00een locul pointerilor obi\u0219nui\u021bi pentru a proteja \u00eempotriva vulnerabilit\u0103\u021bilor cauzate de accesarea zonelor de memorie deja eliberate (use-after-free). MiraclePtr ofer\u0103 un wrapper pentru pointere, realiz\u00e2nd verific\u0103ri suplimentare \u0219i termin\u00e2nd brusc execu\u021bia \u00een cazul detect\u0103rii accesului la zonele de memorie eliberate. Suportul pentru MiraclePtr a fost inclus \u00een mod implicit pe platformele Windows \u0219i Android \u00een mai 2022 (\u00een Chrome 102), iar pe platformele ChromeOS, Linux \u0219i macOS \u00een iunie 2023. Protec\u021bia bazat\u0103 pe MiraclePtr \u00een Chrome se aplic\u0103 tuturor proceselor, cu excep\u021bia procesului dedicat red\u0103rii (renderer). <\/p>\n

Dup\u0103 studierea dinamicii raport\u0103rii vulnerabilit\u0103\u021bilor \u0219i a crash-urilor, precum \u0219i analiza incidentelor legate de securitate \u0219i rezultatelor testelor de fuzzing, s-a concluzionat c\u0103 implementarea MiraclePtr a oferit protec\u021bie pentru 57% dintre vulnerabilit\u0103\u021bile de tip use-after-free, datorit\u0103 tranzi\u021biei la utilizarea MiraclePtr pentru c\u00e2mpurile claselor \u0219i parametrii apelurilor callback. De asemenea, se men\u021bioneaz\u0103 c\u0103 5 din 6 vulnerabilit\u0103\u021bi critice identificate \u00een anul trecut \u00een ramura stabil\u0103 a Chrome au fost identificate prin studierea rapoartelor de crashuri legate de utilizarea MiraclePtr. <\/p>\n

Pre\u021bul aplic\u0103rii MiraclePtr este cre\u0219terea consumului de memorie, deoarece pentru pointeri este necesar\u0103 stocarea a \u00eenc\u0103 4 octe\u021bi cu un contor de referin\u021be. Consumul de memorie principalului proces al browser-ului cu aplicarea MiraclePtr cre\u0219te cu 5,5-8% \u00een versiunile pentru sisteme desktop \u0219i cu 2% \u00een versiunea pentru Android. Cre\u0219terea medie a consumului pentru toate procesele este estimat\u0103 \u00eentre 1-3%. De asemenea, utilizarea MiraclePtr a prezentat regresii individuale care conduc la sc\u0103derea performan\u021bei, dar f\u0103r\u0103 a afecta metrici cheie, cum ar fi timpul de \u00eenc\u0103rcare \u0219i redare a paginii. Dintre regresiile identificate, se remarc\u0103 o \u00eent\u00e2rzire de 1,5% la prima introducere \u00een Chrome OS, o \u00eencetinire de 1,5% la deschiderea tab-urilor pe platforma Android, precum \u0219i o cre\u0219tere a probabilit\u0103\u021bii \u00eent\u00e2rzierii introducerii din cauza concuren\u021bei \u00een fluxul principal (cre\u0219terea probabilit\u0103\u021bii cu 10% \u00een percentilele de 99%).
\n
Sursa: opennet.ro<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u043f\u0440\u043e\u0430\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0432 \u043a\u043e\u0434\u0435 \u043d\u0430 \u044f\u0437\u044b\u043a\u0435 \u0421++ \u0442\u0438\u043f\u0430 MiraclePtr (raw_ptr<T>) \u0432\u043c\u0435\u0441\u0442\u043e \u043e\u0431\u044b\u0447\u043d\u044b\u0445 \u0443\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u0435\u0439 \u0434\u043b\u044f \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432\u044b\u0437\u0432\u0430\u043d\u043d\u044b\u0445 \u043e\u0431\u0440\u0430\u0449\u0435\u043d\u0438\u0435\u043c \u043a \u0443\u0436\u0435 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0451\u043d\u043d\u044b\u043c \u043e\u0431\u043b\u0430\u0441\u0442\u044f\u043c \u043f\u0430\u043c\u044f\u0442\u0438 (use-after-free). MiraclePtr \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u043e\u0431\u0432\u044f\u0437\u043a\u0443 \u043d\u0430\u0434 \u0443\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044f\u043c\u0438, \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u044e\u0449\u0443\u044e \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0438 \u0430\u0432\u0430\u0440\u0438\u0439\u043d\u043e \u0437\u0430\u0432\u0435\u0440\u0448\u0430\u044e\u0449\u0443\u044e \u0440\u0430\u0431\u043e\u0442\u0443 \u0432 \u0441\u043b\u0443\u0447\u0430\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u043e\u0431\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u043a \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0451\u043d\u043d\u044b\u043c \u043e\u0431\u043b\u0430\u0441\u0442\u044f\u043c \u043f\u0430\u043c\u044f\u0442\u0438. \u041f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 MiraclePtr \u0431\u044b\u043b\u0430 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0430 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u043d\u0430 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-113077","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Evaluarea eficien\u021bei utiliz\u0103rii MiraclePtr pentru prevenirea vulnerabilit\u0103\u021bilor \u00een Chrome | ProHoster","description":"Compania Google a analizat eficien\u021ba utiliz\u0103rii tipului MiraclePtr (raw_ptr) \u00een codul scris \u00een C++ \u00een locul pointerilor obi\u0219nui\u021bi pentru a se proteja \u00eempotriva vulnerabilit\u0103\u021bilor cauzate de accesarea unor zone deja eliberate.","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/news\/oczenka-effektivnosti-primeneniya-miracleptr-dlya-predotvrashheniya-uyazvimostej-v-chrome","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041e\u0446\u0435\u043d\u043a\u0430 \u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438 \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u044f MiraclePtr \u0434\u043b\u044f \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 Chrome | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u043f\u0440\u043e\u0430\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0432 \u043a\u043e\u0434\u0435 \u043d\u0430 \u044f\u0437\u044b\u043a\u0435 \u0421++ \u0442\u0438\u043f\u0430 MiraclePtr (raw_ptr) \u0432\u043c\u0435\u0441\u0442\u043e \u043e\u0431\u044b\u0447\u043d\u044b\u0445 \u0443\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u0435\u0439 \u0434\u043b\u044f \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432\u044b\u0437\u0432\u0430\u043d\u043d\u044b\u0445 \u043e\u0431\u0440\u0430\u0449\u0435\u043d\u0438\u0435\u043c \u043a \u0443\u0436\u0435 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0451\u043d\u043d\u044b\u043c \u043e\u0431\u043b\u0430\u0441\u0442\u044f\u043c.","og:url":"https:\/\/prohoster.info\/ro\/blog\/news\/oczenka-effektivnosti-primeneniya-miracleptr-dlya-predotvrashheniya-uyazvimostej-v-chrome","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-01-23T15:28:02+00:00","article:modified_time":"2024-01-23T15:28:02+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/113077","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=113077"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/113077\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=113077"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=113077"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=113077"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}