On Wed, 11 Mar 2020, Kees Cook wrote: > > Sounds good. You could even randomize the position to avoid attacks on via > > the freelist pointer. > > That's a good point. "offset" is just calculated once, and for many > slabs, the available space is quite large. I wonder what the best Correct. > practice might be for how far from the edge to stay. Hmmm. Maybe simply > carve it into thirds, and randomize the offset within the middle third? Take off the first and last word and randomize within the space that is left?
