diff --git a/documentation/hardened_malloc.xhtml b/documentation/hardened_malloc.xhtml index 35a99c7..c8b60ca 100644 --- a/documentation/hardened_malloc.xhtml +++ b/documentation/hardened_malloc.xhtml @@ -1,7 +1,7 @@ - + @@ -73,10 +73,11 @@

CONFIG_N_ARENA=n can be adjusted to increase parallel performance at the expense of memory usage, or decrease memory usage at the expense of parallel performance, where n is an integer. Higher values prefer parallel - performance, lower values prefer lower memory usage. The number of arenas has no impact - on the security properties of hardened_malloc.
- Minimum number of arenas: 1
- Maximum number of arenas: 256

+ performance, whereas lower values prefer lower memory usage. Note that having too many + arenas may cause memory fragmentation and decrease system performance. The number of + arenas has no impact on the security properties of hardened_malloc.

+

Minimum number of arenas: 1

+

Maximum number of arenas: 256

For extra security, CONFIG_SEAL_METADATA=true can be used in order to control whether Memory Protection Keys are used to disable access to all writable allocator state outside of the memory allocator code. It's currently disabled by default