├── Microsoft Edge MemGC Internals.pptx └── README.md /Microsoft Edge MemGC Internals.pptx: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/zenhumany/hitcon2015/c47e911a345af892295f906c62d2af0c3c5a8ef0/Microsoft Edge MemGC Internals.pptx -------------------------------------------------------------------------------- /README.md: -------------------------------------------------------------------------------- 1 | In 2014, Microsoft introduced two new exploit mitigations, called Isolated Heap and MemoryProtection. 2 | These mitigations greatly increases the difficulty of use-after-free(UAF) vulnerability exploit, 3 | but there are still many ways to bypass the mitigations when the pointer to the freed block didn’t remains on the stack. 4 | 5 | In order to completely prevent UAF vulnerabilities exploit, 6 | Microsoft Edge browser introduced a new memory management called MemGC. 7 | MemGC Use the mark and sweep algorithm for memory management. 8 | 9 | In this presentation, the first part will sketch the MemGC Internals by discussing about its data structure, 10 | its memory allocate, free, mark and sweep. The second part will discuss Why MemGC can effectively prevent the UAF'S exploit. 11 | The third part will discuss some weaknesses of MemGC. 12 | --------------------------------------------------------------------------------