3 posts
CHERI's hybrid ABI lets you port C code to capability hardware incrementally.
You have a C codebase that is too large to rewrite in Rust and too critical to leave exposed to buffer overflows. CHERI capability hardware promises to catch…
Memory safety at the hardware level has been possible since the 1970s.
Seventy percent of CVEs are memory safety bugs. Buffer overflows, use-after-free, double frees. The kind of vulnerabilities that let an attacker pivot from a…
CHERI is a hardware extension that turns every pointer into a bounded capability.
Buffer overflows have been on the CWE Top 25 for twenty years. We have stack canaries, ASLR, DEP, control-flow integrity, and memory-safe languages, yet they…