Awesome Privacy

Recent Commits

• Daniel Micay (22 Feb 26)

  fix realloc from small sized allocations with above PAGE_SIZE alignment Large allocations don't always have a size larger than the maximum slab size class because alignment larger than PAGE_SIZE is handled via large allocations. The general case in realloc was assuming small sizes imply slab allocations which isn't guaranteed. Alignment above PAGE_SIZE is rare and realloc doesn't preserve alignment so passing aligned allocations to realloc is also rare. In practice, it ends up doing invalid accesses within the reserved metadata region which will almost always crash due to it being largely PROT_NONE memory and it having an extremely high likelihood of indexing into the PROT_NONE areas rather than the actual metadata. That means if this impacted an app, it would currently be crashing in practice. Due to the reserved region for metadata and the fact that it would be crashing, this can be ruled out as a security concern but is potentially an extremely rare compatibility issue if there's any code using this. Reported-by: Stefan Rus <stefan@photonspark.com>

• Daniel Micay (16 Feb 26)

  update libdivide to 5.3.0

• bravesasha (07 Jan 26)

  Update LICENSE

• qikp0 (03 Jan 26)

  Android 16 QPR2 is now the active branch of AOSP

• Ganwtrs (06 Dec 25)

  Correct title of README from Hardened malloc to hardened_malloc

• Ganwtrs (06 Dec 25)

  Remove spaces around the slash (like one/two)

• dependabot[bot] (20 Nov 25)

  build(deps): bump actions/checkout from 5 to 6 Bumps [actions/checkout](https://github.com/actions/checkout) from 5 to 6. - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/v5...v6) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: '6' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>

• charles25565 (15 Nov 25)

  Bump minimum AOSP version to QPR1

• Charles (29 Oct 25)

  gitignore: use exact matches

• Daniel Micay (23 Sept 25)

  drop legacy compiler versions from GitHub workflow

• Daniel Micay (23 Sept 25)

  add newer Clang versions for GitHub workflow

• Christian Göttsche (21 Sept 25)

  Fix two typos

• Christian Göttsche (21 Oct 24)

  ReadMe: adjust section about library location

• charles25565 (17 Sept 25)

  Update dependencies in README Update from bookworm to trixie, updating GKIs, and changing to Android 16.

• Daniel Micay (11 Aug 25)

  update GitHub actions/checkout to 5

• Віктор Дуйко (05 Apr 25)

  docs: updated the license date

• Christian Göttsche (26 Mar 25)

  support GCC15 GCC 15 starts warning about non NUL-terminated string literals: chacha.c:44:31: error: initializer-string for array of ‘char’ truncates NUL terminator but destination lacks ‘nonstring’ attribute (17 chars into 16 available) [-Werror=unterminated-string-initialization] 44 | static const char sigma[16] = "expand 32-byte k"; | ^~~~~~~~~~~~~~~~~~

• Daniel Micay (17 Feb 25)

  rename calculate_waste.py to calculate-waste

• Daniel Micay (25 Jan 25)

  update libdivide to 5.2.0

• Daniel Micay (16 Dec 24)

  add newer compiler versions for GitHub workflow

• Daniel Micay (16 Dec 24)

  handle GitHub runner image updates clang-14 and clang-15 are no longer installed by default.

• Daniel Micay (23 Oct 24)

  update outdated branch in README

• Daniel Micay (12 Oct 24)

  remove trailing whitespace

• Daniel Micay (12 Oct 24)

  preserve PROT_MTE when releasing memory

• Daniel Micay (12 Oct 24)

  use wrapper for calling memory_map_mte

• Daniel Micay (12 Oct 24)

  reuse code for memory_map_mte This drops the separate error message since that doesn't seem useful.

• Daniel Micay (12 Oct 24)

  reduce probability hint for is_memtag_enabled

• Daniel Micay (09 Oct 24)

  remove redundant warning switches for Android Android already enables -Wall and -Wextra in the global soong build settings.

• Julien Voisin (03 Oct 24)

  Fix -Wimplicit-function-declaration error with gcc 14. ``` malloc_info.c: In function 'leak_memory': malloc_info.c:12:12: error: implicit declaration of function 'malloc' [-Wimplicit-function-declaration] 12 | (void)!malloc(1024 * 1024 * 1024); | ^~~~~~ malloc_info.c:10:1: note: include '<stdlib.h>' or provide a declaration of 'malloc' 9 | #include "../util.h" +++ |+#include <stdlib.h> 10 | malloc_info.c:12:12: warning: incompatible implicit declaration of built-in function 'malloc' [-Wbuiltin-declaration-mismatch] 12 | (void)!malloc(1024 * 1024 * 1024); | ^~~~~~ ``` Taken from https://gitlab.alpinelinux.org/alpine/aports/-/merge_requests/72971/ Co-authored-by: @mio

• maade93791 (09 Sept 24)

  android: use more basic CPU target for memtag This is required for hardened_malloc to work in microdroid on MTE-enabled devices (currently, 8th and 9th generation Pixels) since PVMFW only supports ARMv8 cores. https://android.googlesource.com/platform/packages/modules/Virtualization/+/refs/tags/android-15.0.0_r1/pvmfw/platform.dts#100