Google Online Security Blog: Hardening the media stack

Security Blog

The latest news and insights from Google on security and safety on the Internet

Hardening the media stack

5 de mayo de 2016

Posted by Dan Austin and Jeff Vander Stoep, Android Security team[Cross-posted from the Android Developers Blog]rewardsecurity bulletins

Prevention: Stop bugs from becoming vulnerabilities

Containment: Protect the system by de-privileging and isolating components that handle untrusted content

Preventioninteger overflowsUBSanparseChunkMPEG4ExtractorSIZE_MAXsizechunk_sizesizechunk_sizesizememcpysizechunk_sizesizeProject Zero

Figure 1.sizer6chunk_sizer7r0sizebuffersizer0sizer0r6sizer7chunk_sizer5r0r0r7r0r7CCr3r3bufferadd

Figure 2. Containment

parsing code moved into unprivileged sandboxes that have few or no permissions

components that require sensitive permissions moved into separate sandboxes that only grant access to the specific resources the component needs. For example, only the cameraserver may access the camera, only the audioserver may access Bluetooth, and only the drmserver may access DRM resources.

Figure 3SELinuxseccomp Conclusionsecurity@android.com

No hay comentarios :

Publicar un comentario

Etiquetas

Archive

2024
- nov
- oct
- sept
- ago
- jul
- jun
- may
- abr
- mar
- feb
- ene

2023
- dic
- nov
- oct
- sept
- ago
- jul
- jun
- may
- abr
- mar
- feb
- ene

2022
- dic
- nov
- oct
- sept
- ago
- jul
- jun
- may
- abr
- mar
- feb
- ene

2021
- dic
- nov
- oct
- sept
- ago
- jul
- jun
- may
- abr
- mar
- feb
- ene

2020
- dic
- nov
- oct
- sept
- ago
- jul
- jun
- may
- abr
- mar
- feb
- ene

2019
- dic
- nov
- oct
- sept
- ago
- jul
- jun
- may
- abr
- mar
- feb
- ene

2018
- dic
- nov
- oct
- sept
- ago
- jul
- jun
- may
- abr
- mar
- feb
- ene

2017
- dic
- nov
- oct
- sept
- jul
- jun
- may
- abr
- mar
- feb
- ene

2016
- dic
- nov
- oct
- sept
- ago
- jul
- jun
- may
- abr
- mar
- feb
- ene

2015
- dic
- nov
- oct
- sept
- ago
- jul
- jun
- may
- abr
- mar
- feb
- ene

2014
- dic
- nov
- oct
- sept
- ago
- jul
- jun
- abr
- mar
- feb
- ene

2013
- dic
- nov
- oct
- ago
- jun
- may
- abr
- mar
- feb
- ene

2012
- dic
- sept
- ago
- jun
- may
- abr
- mar
- feb
- ene

2011
- dic
- nov
- oct
- sept
- ago
- jul
- jun
- may
- abr
- mar
- feb

2010
- nov
- oct
- sept
- ago
- jul
- may
- abr
- mar

2009
- nov
- oct
- ago
- jul
- jun
- mar

2008
- dic
- nov
- oct
- ago
- jul
- may
- feb

2007
- nov
- oct
- sept
- jul
- jun
- may

Feed

Give us feedback in our Product Forums.

Google
Privacy
Terms