PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

A glance at compiler internals: Keep my memset

blog.quarkslab.com | research | #c | #llvm | #compilers | #security | #clang | #optimization
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Why Clang/LLVM can delete your memset: tracing llvm.memset through Dead Store Elimination, the risk for code that wipes secrets, and the volatile function-pointer trick that keeps the wipe alive.
Published
Collected

Related coverage

research · blog.quarkslab.com
Implementing a Custom Directive Handler in Clang
How-to on implementing a custom #pragma directive handler in clang, used to drive an LLVM-based obfuscator while keeping sources compilable elsewhere; a tour of the preprocessing and parsing stages.
research · blog.quarkslab.com
Obfuscation vs the Optimizer: An LLVM Middle-End Arms Race
A Quarkslab post on the tug-of-war between obfuscators and compiler optimizers: through LLVM's middle-end IR and passes, it shows how a single upstream commit can unravel an obfuscation.
research · blog.quarkslab.com
Clang Hardening Cheat Sheet - Ten Years Later
Quarkslab updates its Clang Hardening Cheat Sheet a decade later with OpenSSF-recommended flags and newer mitigations against memory corruption, ROP/JOP and speculative execution attacks.
research · blog.quarkslab.com
Clang Hardening Cheat Sheet
A Clang hardening cheat sheet: fortify source, strip/debug flags, ASLR/PIE and related compile- and link-time protections, filling a gap since most hardening guides focus on GCC.
research · blog.quarkslab.com
llvm_dev_meeting:
Report from the 2015 LLVM Developer Meeting: Quarkslab's out-of-tree pass tutorial and a lightning talk on LLVM's limits, plus recaps of talks on WebAssembly, OpenCL and performance tracking.
research · blog.quarkslab.com
goto llvm_dev_meeting;
Announcement: Quarkslab's compiler crew is off to the LLVM Developer Meeting in California, presenting an out-of-tree LLVM pass tutorial and a lightning talk on bytecode obfuscation.
Back