nixos/malloc: add scudo from LLVM compiler-rt

2019-05-30 02:16:45 +09:00 · 2019-05-30 02:16:45 +09:00 · 1cc8ea7cb4
commit 1cc8ea7cb4
parent 60b59c34a8
1 changed files with 9 additions and 0 deletions
--- a/nixos/modules/config/malloc.nix
+++ b/nixos/modules/config/malloc.nix
@ -21,6 +21,15 @@ let
        and scalable concurrency support.
      '';
    };
+
+    "scudo" = {
+      libPath = "${pkgs.llvmPackages.compiler-rt}/lib/linux/libclang_rt.scudo-x86_64.so";
+      description = ''
+        A user-mode allocator based on LLVM Sanitizer’s CombinedAllocator,
+        which aims at providing additional mitigations against heap based
+        vulnerabilities, while maintaining good performance.
+      '';
+    };
  };

  providerConf = providers."${cfg.provider}";