{"id":82655,"date":"2020-05-23T19:42:11","date_gmt":"2020-05-23T17:42:11","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/checkpoint-predlozhil-tehniku-zashhity-safe-linking-uslozhnyayushhuyu-ekspluatacziyu-uyazvimostej"},"modified":"2020-05-23T19:42:11","modified_gmt":"2020-05-23T17:42:11","slug":"checkpoint-predlozhil-tehniku-zashhity-safe-linking-uslozhnyayushhuyu-ekspluatacziyu-uyazvimostej","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/news\/checkpoint-predlozhil-tehniku-zashhity-safe-linking-uslozhnyayushhuyu-ekspluatacziyu-uyazvimostej","title":{"rendered":"Checkpoint ofron nj\u00eb teknik\u00eb mbrojtjeje Safe-Linking, q\u00eb e v\u00ebshtir\u00ebson shfryt\u00ebzimin e dob\u00ebsive.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Kompania Checkpoint ka prezantuar<\/a><\/noindex> mekanizmi i mbrojtjes Safe-Linking, q\u00eb e pamund\u00ebson rritjen e mund\u00ebsive p\u00ebr krijimin e eksploiteve q\u00eb manipulojn\u00eb p\u00ebrcaktimin ose ndryshimin e treguesve n\u00eb buffers, t\u00eb alokuar gjat\u00eb thirrjes malloc. Safe-Linking nuk e bllokon plotsisht mund\u00ebsin\u00eb e eksploatimit t\u00eb dob\u00ebsive, por me shpenzime minimale, e komplikon ndjesh\u00ebm krijimin e disa kategorive t\u00eb eksploiteve, pasi p\u00ebrve\u00e7 mbushjes s\u00eb shfryt\u00ebzueshme t\u00eb buffer-it, \u00ebsht\u00eb e nevojshme t\u00eb gjendet edhe nj\u00eb dob\u00ebsi tjet\u00ebr q\u00eb shkakton rrjedhjen e informacionit mbi vendndodhjen e heap-it n\u00eb memorie.<\/p>\n

Patch-\u00ebt me realizimin e Safe-Linking jan\u00eb p\u00ebrgatitur p\u00ebr Glibc (ptmalloc), uClibc-NG (dlmalloc), gperftools (tcmalloc) dhe Google TCMalloc, dhe gjithashtu jan\u00eb ofruar p\u00ebr modernizimin e mbrojtjes n\u00eb Chromium (n\u00eb
\nChromium q\u00eb nga viti 2012 \u00ebsht\u00eb integruar nj\u00eb teknik\u00eb mbrojtjeje MaskPtr, e fokusuar n\u00eb zgjidhjen e t\u00eb nj\u00ebjt\u00ebs problem, por zgjidhja nga Checkpoint tregon performanc\u00eb m\u00eb t\u00eb lart\u00eb).
\nPatch-\u00ebt e propozuar tashm\u00eb jan\u00eb miratuar p\u00ebr shp\u00ebrndarje n\u00eb l\u00ebshimin e gushtit Glibc 3.32<\/a><\/noindex> dhe p\u00ebrdorimi i Safe-Linking do t\u00eb p\u00ebrfshihet si parazgjedhje. N\u00eb uClibc-NG, mb\u00ebshtetje p\u00ebr Safe-Linking hyri<\/a><\/noindex> do t\u00eb p\u00ebrfshihet n\u00eb l\u00ebshimin 1.0.33 dhe \u00ebsht\u00eb aktivizuar si parazgjedhje. N\u00eb gperftools (tcmalloc i vjet\u00ebr) ndryshime u miratua<\/a><\/noindex>, por do t\u00eb ofrohen n\u00eb nj\u00eb nga l\u00ebshimet e ardhshme si nj\u00eb opsion. <\/p>\n

Zhvilluesit TCMalloc<\/a><\/noindex> (tcmalloc i ri) refuzuan ta pranojn\u00eb , duke ndryshuar emrin e projektit n\u00eb Raku. Edhe pse projekti formalisht tashm\u00eb ka nj\u00eb em\u00ebr t\u00eb ri, ndryshimi i emrit p\u00ebr nj\u00eb projekt q\u00eb ka zhvilluar p\u00ebr 19 vjet k\u00ebrkon nj\u00eb pun\u00eb t\u00eb madhe dhe do t\u00eb k\u00ebrkoj\u00eb koh\u00eb p\u00ebr t\u00eb p\u00ebrfunduar plot\u00ebsisht procesin e riem\u00ebrtimit.<\/a><\/noindex>, duke u referuar nj\u00eb r\u00ebnie t\u00eb fort\u00eb t\u00eb performanc\u00ebs dhe nevoj\u00ebs p\u00ebr t\u00eb shtuar teste t\u00eb avancuara p\u00ebr verifikimin e rregullt t\u00eb funksionimit t\u00eb duhur. Testimi nga inxhinier\u00ebt e Checkpoint tregoi se metoda Safe-Linking nuk shkakton shpenzime t\u00eb tep\u00ebrta t\u00eb memories, nd\u00ebrsa performanca gjat\u00eb kryerjes s\u00eb operacioneve me grumbull n\u00eb mesatare zvog\u00eblohet vet\u00ebm me 0.02%, dhe n\u00eb rastin m\u00eb t\u00eb keq me 1.5% (p\u00ebr krahasim, shpenzimet n\u00eb metod\u00ebn e p\u00ebrdorur n\u00eb Chromium vler\u00ebsohen si \u2018m\u00eb pak se 2%\u2019). Aktivizimi
\ni Safe-Linking sjell ekzekutimin e 2-3 instrukcioneve t\u00eb assemblerit p\u00ebr \u00e7do thirrje free() dhe 3-4 instrukcioneve p\u00ebr thirrjen malloc(). Nuk nevojitet startimi i fazave t\u00eb inicializimit dhe gjenerimit t\u00eb vlerave t\u00eb rastit.<\/p>\n

\"Checkpoint<\/a><\/noindex><\/center><\/p>\n

Safe-Linking mund t\u00eb p\u00ebrdoret jo vet\u00ebm p\u00ebr t\u00eb rritur sigurin\u00eb e implementimeve t\u00eb ndryshme t\u00eb heap-it, por gjithashtu p\u00ebr t\u00eb shtuar mjete p\u00ebr kontrollin e integritetit n\u00eb \u00e7do struktur\u00eb t\u00eb dh\u00ebnash ku p\u00ebrdoren lista t\u00eb nj\u00ebpasnj\u00ebshme treguesish, t\u00eb vendosur pran\u00eb bufereve t\u00eb vet\u00eb. Metodoja \u00ebsht\u00eb shum\u00eb e thjesht\u00eb p\u00ebr t'u implementuar dhe k\u00ebrkon vet\u00ebm shtimin e nj\u00eb makrosi dhe p\u00ebrdorimin e tij n\u00eb treguesit e bllokut t\u00eb ardhsh\u00ebm n\u00eb kod (p\u00ebr shembull, p\u00ebr Glibc ndryshon<\/a><\/noindex> vet\u00ebm disa rreshta n\u00eb kod). Metoda p\u00ebrfshin ndryshimet e m\u00ebposhtme:<\/p>\n

+#define PROTECT_PTR(pos, ptr) \\
\n + ((__typeof (ptr)) ((((size_t) pos) >> 12) ^ ((size_t) ptr)))<\/p>\n

+#define REVEAL_PTR(ptr) PROTECT_PTR (&ptr, ptr)<\/p>\n

\u2014 nextp = p->fd;
\n + nextp = REVEAL_PTR (p->fd);
\n \u2026<\/p>\n

Thelbi i metod\u00ebs q\u00ebndron n\u00eb aplikimin e t\u00eb dh\u00ebnave rast\u00ebsore nga mekanizmi i rast\u00ebsis\u00eb s\u00eb adresave ASLR (mmap_base) p\u00ebr t\u00eb mbrojtur listat e lidhura nj\u00ebansh\u00ebm, si Fast-Bins dhe TCache. Para se t\u00eb aplikohet n\u00eb vler\u00ebn e pointer-it p\u00ebr elementin e ardhsh\u00ebm n\u00eb list\u00eb, kryhet nj\u00eb transformim me mask\u00eb dhe verifikimi i p\u00ebrputhjes me kufirin e faqeve t\u00eb memories. Pointer-i z\u00ebvend\u00ebsohet me rezultatin e operacionit \u2018(L >> PAGE_SHIFT) XOR (P)\u2019, ku P \u00ebsht\u00eb vlera e pointer-it, dhe L \u00ebsht\u00eb lokacioni n\u00eb memorie ku mbahet ky pointer.
\n

\"Checkpoint<\/a><\/noindex><\/center><\/p>\n

Kur p\u00ebrdoret n\u00eb sistem ASLR<\/a><\/noindex> (Randomizimi i Dispositivit t\u00eb Hap\u00ebsir\u00ebs Address) disa bita L me adres\u00ebn baz\u00eb t\u00eb heap-it p\u00ebrmbajn\u00eb vlera t\u00eb rast\u00ebsishme, t\u00eb cilat p\u00ebrdoren si \u00e7el\u00ebs p\u00ebr kodimin e P (shk\u00ebputen nga nj\u00eb operacion i zhvendosjes 12-bit p\u00ebr faqe 4096-byte). Nj\u00eb manipulim i till\u00eb zvog\u00eblon rrezikun e kapjes s\u00eb treguesit n\u00eb nj\u00eb sulm, pasi treguesi nuk ruhet n\u00eb form\u00ebn e tij origjinale dhe p\u00ebr ta z\u00ebvend\u00ebsuar, nevojitet t\u00eb dihet informacioni mbi vendndodhjen e heap-it. P\u00ebr m\u00eb tep\u00ebr, n\u00eb kodin e patch-it gjithashtu ka nj\u00eb kontroll shtes\u00eb p\u00ebr rregullimin e bllokut, i cili nuk e lejon sulmuesin t\u00eb z\u00ebvend\u00ebsoj\u00eb treguesin me nj\u00eb vler\u00eb t\u00eb paekuilibruar dhe k\u00ebrkon njohjen e numrit t\u00eb bit\u00ebve me t\u00eb cil\u00ebt \u00ebsht\u00eb b\u00ebr\u00eb rregullimi, q\u00eb n\u00eb sisteme 64-bitave gjithashtu lejon bllokimin e 15 nga 16 p\u00ebrpjekjeve t\u00eb sulmit q\u00eb nuk marrin parasysh rregullimin.<\/p>\n

Metoda \u00ebsht\u00eb efektive p\u00ebr mbrojtjen nga sulmet q\u00eb p\u00ebrdorin ri-shkrimin e pjessh\u00ebm t\u00eb treguesve (ndryshimi i bajt\u00ebve m\u00eb t\u00eb rinj), ri-shkrimin e plot\u00eb t\u00eb treguesve (ridrejtime n\u00eb kodin e sulmuesit) dhe ndryshimin e pozicionit t\u00eb list\u00ebs n\u00eb nj\u00eb adres\u00eb t\u00eb paekuilibruar. Si shembull, \u00ebsht\u00eb treguar se p\u00ebrdorimi i Safe-Linking n\u00eb malloc do t\u00eb mund\u00ebsonte bllokimin e shfryt\u00ebzimit t\u00eb fundit. i identifikuar<\/a><\/noindex> nga t\u00eb nj\u00ebjt\u00ebt hulumtues t\u00eb dob\u00ebsive CVE-2020-6007<\/a><\/noindex> n\u00eb ndri\u00e7imin inteligjent Philips Hue Bridge, e shkaktuar nga mbushja e tamponit dhe e cila lejon marrjen e kontrollit mbi pajisjen.<\/p>\n

<\/a><\/noindex><\/p>\n

Burimi: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Checkpoint \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u0437\u0430\u0449\u0438\u0442\u044b Safe-Linking, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u0443\u0441\u043b\u043e\u0436\u043d\u0438\u0442\u044c \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u043e\u0432, \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u0443\u044e\u0449\u0438\u0445 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u0435\u043c \u0438\u043b\u0438 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0435\u043c \u0443\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u0435\u0439 \u043d\u0430 \u0431\u0443\u0444\u0435\u0440\u044b, \u0432\u044b\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0435 \u043f\u0440\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0438 \u0432\u044b\u0437\u043e\u0432\u0430 malloc. Safe-Linking \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u043d\u0435 \u0431\u043b\u043e\u043a\u0438\u0440\u0443\u0435\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043d\u043e \u043f\u0440\u0438 \u043c\u0438\u043d\u0438\u043c\u0430\u043b\u044c\u043d\u044b\u0445 \u043d\u0430\u043a\u043b\u0430\u0434\u043d\u044b\u0445 \u0440\u0430\u0441\u0445\u043e\u0434\u0430\u0445 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u043e \u0443\u0441\u043b\u043e\u0436\u043d\u044f\u0435\u0442 \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0435 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043a\u0430\u0442\u0435\u0433\u043e\u0440\u0438\u0439 \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u043e\u0432, \u0442\u0430\u043a \u043a\u0430\u043a \u043f\u043e\u043c\u0438\u043c\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u043e\u0433\u043e \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0431\u0443\u0444\u0435\u0440\u0430 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e \u043d\u0430\u0439\u0442\u0438 \u0435\u0449\u0451 \u043e\u0434\u043d\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0432\u044b\u0437\u044b\u0432\u0430\u044e\u0449\u0443\u044e \u0443\u0442\u0435\u0447\u043a\u0443 \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u0439 \u043e […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":82656,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-82655","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Checkpoint ofroi teknik\u00ebn e mbrojtjes Safe-Linking, e cila e v\u00ebshtir\u00ebson shfryt\u00ebzimin e dob\u00ebsive | ProHoster","description":"Kompania Checkpoint paraqiti mekanizmin e mbrojtjes Safe-Linking.","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/news\/checkpoint-predlozhil-tehniku-zashhity-safe-linking-uslozhnyayushhuyu-ekspluatacziyu-uyazvimostej","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Checkpoint \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0438\u043b \u0442\u0435\u0445\u043d\u0438\u043a\u0443 \u0437\u0430\u0449\u0438\u0442\u044b Safe-Linking, \u0443\u0441\u043b\u043e\u0436\u043d\u044f\u044e\u0449\u0443\u044e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Checkpoint \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u0437\u0430\u0449\u0438\u0442\u044b Safe-Linking.","og:url":"https:\/\/prohoster.info\/sq\/blog\/news\/checkpoint-predlozhil-tehniku-zashhity-safe-linking-uslozhnyayushhuyu-ekspluatacziyu-uyazvimostej","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-05-23T17:42:11+00:00","article:modified_time":"2020-05-23T17:42:11+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"82655","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 15:33:26","updated":"2022-10-01 05:37:05","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/82655","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=82655"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/82655\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media\/82656"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=82655"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=82655"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=82655"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}