{"id":113077,"date":"2024-01-23T17:28:02","date_gmt":"2024-01-23T15:28:02","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/oczenka-effektivnosti-primeneniya-miracleptr-dlya-predotvrashheniya-uyazvimostej-v-chrome"},"modified":"2024-01-23T17:28:02","modified_gmt":"2024-01-23T15:28:02","slug":"oczenka-effektivnosti-primeneniya-miracleptr-dlya-predotvrashheniya-uyazvimostej-v-chrome","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sl\/blog\/news\/oczenka-effektivnosti-primeneniya-miracleptr-dlya-predotvrashheniya-uyazvimostej-v-chrome","title":{"rendered":"Procjena u\u010dinkovitosti primjene MiraclePtr za spre\u010davanje ranjivosti u Chromeu","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Podjetje Google je analiziralo u\u010dinkovitost uporabe tipa MiraclePtr (raw_ptr<T>) v programskem jeziku C++ namesto obi\u010dajnih kazalcev za za\u0161\u010dito pred ranljivostmi, ki izhajajo iz dostopa do \u017ee osvobojenih pomnilskih obmo\u010dij (use-after-free). MiraclePtr zagotavlja ovoj nad kazalci, ki opravlja dodatne preverbe in nujno prekine delovanje v primeru odkritja dostopa do osvobojenih pomnilskih obmo\u010dij. Podpora za MiraclePtr je bila privzeto vklju\u010dena na platformah Windows in Android maja 2022 (v Chrome 102), na platformah ChromeOS, Linux in macOS pa junija 2023. Za\u0161\u010dita na osnovi MiraclePtr se v Chromu uporablja za vse procese, razen za proces, ki skrbi za risanje (renderer). <\/p>\n

Po preu\u010ditvi dinamike po\u0161iljanja poro\u010dil o ranljivostih in nujnih zaprtjih ter analizi povezanih varnostnih incidentov in rezultatov fuzzing testiranja je bilo ugotovljeno, da je uvedba MiraclePtr zagotovila za\u0161\u010dito pred 57% ranljivostmi razreda use-after-free, zahvaljujo\u010d prehodu na uporabo MiraclePtr za polja razredov in parametre callback klicev. Poleg tega se omenja, da je bilo 5 od 6 kriti\u010dnih ranljivosti, ki so bile odkrite v prej\u0161njem letu v stabilni razli\u010dici Chrom, identificiranih na podlagi preu\u010devanja poro\u010dil o nujnih zaprtjih, povezanih z uporabo MiraclePtr. <\/p>\n

Cena uporabe MiraclePtr je pove\u010dano porabo pomnilnika, saj je treba shraniti dodatnih 4 byte za kazalce s \u0161tevcem sklicev. Poraba pomnilnika v osnovnem procesu brskalnika ob uporabi MiraclePtr se pove\u010da za 5.5-8% v razli\u010dicah za namizne sisteme in za 2% v razli\u010dici za Android. Povpre\u010dno pove\u010danje porabe za vse procese se ocenjuje na 1-3%. Poleg tega so pri uporabi MiraclePtr zabele\u017eene posamezne regresije, ki povzro\u010dajo zmanj\u0161anje zmogljivosti, vendar niso povezane s klju\u010dnimi merili, kot sta \u010das nalaganja in risanja strani. Med odkritimi regresijami so omenjeno 1.5% po\u010dasnej\u0161i prvi vnos v Chrome OS, 1.5% po\u010dasnej\u0161e odpiranje zavihkov na platformi Android ter pove\u010dana verjetnost zakasnelega vnosa zaradi konkurence v glavnem nitju (pove\u010danje verjetnosti za 10% v 99. percentilu).
\n
Izvor: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u043f\u0440\u043e\u0430\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0432 \u043a\u043e\u0434\u0435 \u043d\u0430 \u044f\u0437\u044b\u043a\u0435 \u0421++ \u0442\u0438\u043f\u0430 MiraclePtr (raw_ptr<T>) \u0432\u043c\u0435\u0441\u0442\u043e \u043e\u0431\u044b\u0447\u043d\u044b\u0445 \u0443\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u0435\u0439 \u0434\u043b\u044f \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432\u044b\u0437\u0432\u0430\u043d\u043d\u044b\u0445 \u043e\u0431\u0440\u0430\u0449\u0435\u043d\u0438\u0435\u043c \u043a \u0443\u0436\u0435 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0451\u043d\u043d\u044b\u043c \u043e\u0431\u043b\u0430\u0441\u0442\u044f\u043c \u043f\u0430\u043c\u044f\u0442\u0438 (use-after-free). MiraclePtr \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u043e\u0431\u0432\u044f\u0437\u043a\u0443 \u043d\u0430\u0434 \u0443\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044f\u043c\u0438, \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u044e\u0449\u0443\u044e \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0438 \u0430\u0432\u0430\u0440\u0438\u0439\u043d\u043e \u0437\u0430\u0432\u0435\u0440\u0448\u0430\u044e\u0449\u0443\u044e \u0440\u0430\u0431\u043e\u0442\u0443 \u0432 \u0441\u043b\u0443\u0447\u0430\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u043e\u0431\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u043a \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0451\u043d\u043d\u044b\u043c \u043e\u0431\u043b\u0430\u0441\u0442\u044f\u043c \u043f\u0430\u043c\u044f\u0442\u0438. \u041f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 MiraclePtr \u0431\u044b\u043b\u0430 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0430 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u043d\u0430 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-113077","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Ocena u\u010dinkovitosti uporabe MiraclePtr za prepre\u010devanje ranljivosti v Chromu | ProHoster","description":"Podjetje Google je preu\u010dilo u\u010dinkovitost uporabe tipa MiraclePtr (raw_ptr) v jeziku C++ namesto obi\u010dajnih kazalcev za za\u0161\u010dito pred ranljivostmi, ki nastanejo pri dostopu do \u017ee osvobojenih obmo\u010dij.","canonical_url":"https:\/\/prohoster.info\/sl\/blog\/news\/oczenka-effektivnosti-primeneniya-miracleptr-dlya-predotvrashheniya-uyazvimostej-v-chrome","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sl_SI","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041e\u0446\u0435\u043d\u043a\u0430 \u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438 \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u044f MiraclePtr \u0434\u043b\u044f \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 Chrome | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u043f\u0440\u043e\u0430\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0432 \u043a\u043e\u0434\u0435 \u043d\u0430 \u044f\u0437\u044b\u043a\u0435 \u0421++ \u0442\u0438\u043f\u0430 MiraclePtr (raw_ptr) \u0432\u043c\u0435\u0441\u0442\u043e \u043e\u0431\u044b\u0447\u043d\u044b\u0445 \u0443\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u0435\u0439 \u0434\u043b\u044f \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432\u044b\u0437\u0432\u0430\u043d\u043d\u044b\u0445 \u043e\u0431\u0440\u0430\u0449\u0435\u043d\u0438\u0435\u043c \u043a \u0443\u0436\u0435 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0451\u043d\u043d\u044b\u043c \u043e\u0431\u043b\u0430\u0441\u0442\u044f\u043c.","og:url":"https:\/\/prohoster.info\/sl\/blog\/news\/oczenka-effektivnosti-primeneniya-miracleptr-dlya-predotvrashheniya-uyazvimostej-v-chrome","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-01-23T15:28:02+00:00","article:modified_time":"2024-01-23T15:28:02+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/posts\/113077","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/comments?post=113077"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/posts\/113077\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/media?parent=113077"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/categories?post=113077"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/tags?post=113077"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}