-
Notifications
You must be signed in to change notification settings - Fork 16.6k
Labels
Description
Preflight Checklist
- I have read the Contributing Guidelines for this project.
- I agree to follow the Code of Conduct that this project adheres to.
- I have searched the issue tracker for a feature request that matches the one I want to file, without success.
Problem Description
Apple shipped a new feature in Tahoe called Memory Integrity Enforcement (MIE).
This (much) better protects against buffer overflow attacks.
For any non-Apple applications, this should be enabled during compilation time. (opt-in)
I think this would be an amazing benefit for all electron users if those applications (Slack, ...) could benefit from the same protections.
How to enable: Xcode -> Enhanced Security -> Enable Hardware Memory Tagging
Proposed Solution
Add to Clang for macOS arm64 builds: -fsanitize=memtag
Alternatives Considered
N/A
Additional Information
More information: https://security.apple.com/blog/memory-integrity-enforcement/