C can be memory safe, we only need to turn these features on. Oh, by the way, th...

musicale · 2024-06-22T03:52:41

10K memory safe packages (so far): https://www.cheribsd.org

janice1999 · 2024-06-22T21:03:03

And it only requires massive hardware changes and overhead that no one has put into production. Morello is still a research project afaik.

kwitaszczyk · 2024-06-22T21:48:05

CHERI-RISC-V is being standardised [1], Codasip is working on a commercial implementation of CHERI-RISC-V [2], and lowRISC is working on the Sonata project [3] implementing CHERIoT.

The Early performance results from the prototype Morello microarchitecture report [4] predicts the overhead between 1.8% and 3.0%. We don’t know what that overhead would be in production until such a commercial implementation is delivered but we have enough evidence it is worth the effort with the current estimates and given that CHERI can deterministically prevent around 2/3 of memory-safety-related vulnerabilities [5], not to mention benefits of mitigating future unknown vulnerabilities with compartmentalisation.

[1] https://github.com/riscv/riscv-cheri

[2] https://codasip.com/solutions/riscv-processor-safety-securit...

[3] https://www.sunburst-project.org/

[4] https://ctsrd-cheri.github.io/morello-early-performance-resu...

[5] https://msrc.microsoft.com/blog/2020/10/security-analysis-of...