From 9eb89b33bf367ace48e28676aeb5a18cb10428ea Mon Sep 17 00:00:00 2001 From: inference Date: Mon, 29 Jan 2024 20:11:07 +0000 Subject: [PATCH] Document light variant security properties versus default allocators --- documentation/hardened_malloc.xhtml | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/documentation/hardened_malloc.xhtml b/documentation/hardened_malloc.xhtml index c8b60ca..a16c95c 100644 --- a/documentation/hardened_malloc.xhtml +++ b/documentation/hardened_malloc.xhtml @@ -1,7 +1,7 @@ - + @@ -86,7 +86,9 @@ memory region with high entropy random guard regions around it.

For low-memory systems, VARIANT=light can be used to compile the light variant of hardened_malloc, which sacrifices some security for much less memory - usage.

+ usage. This option still produces a more hardened memory allocator than both the + default musl and glibc allocators, despite the security sacrifices over the full + variant.

For all compile-time options, see the configuration section of hardened_malloc's extensive official documentation.