Struct HardenedPolicy 

pub struct HardenedPolicy;

Zero-Sized Type (ZST) representing a hardened allocation policy with memory poisoning, zero-initialization, and free-list XOR encryption.

The freelist encryption uses a triangular XOR key: page_address ^ per_thread_seed ^ process_key, where both seeds come from OS entropy via std::collections::hash_map::RandomState.

Trait Implementations

impl AllocPolicy for HardenedPolicy

const DELAY_PAGE_WAKE: bool = true

Page-waking hysteresis: a full page does not re-enter the active list until at least capacity / WAKE_DENOMINATOR blocks have been freed. This widens the temporal window between free and realloc, making use-after-free and LIFO heap-spray exploits harder to land. Zero-cost in StandardPolicy (branch eliminated at monomorphization).

const MITIGATION_FLAGS: u32 = mitigations::IMPLEMENTED

All currently implemented mitigations active.

const ENABLE_POISONING: bool = true

If true, write poison bytes to memory on allocation and deallocation to detect heap corruption.

const ZERO_INITIALIZE: bool = true

If true, zero-initialize all memory allocations.

const ENABLE_FREE_LIST_ENCRYPTION: bool = true

If true, encrypt free list next pointers using the per-segment XOR key.

const RANDOMIZE_ALLOCATION: bool = true

If true, randomize the allocation order of blocks in a page.

const POLICY_NAME: &'static str = "hardened"

Human-readable name for this policy. Zero-cost — inlined by the compiler.

const POISON_FREE_BYTE: u8 = 0xDE

Byte pattern to write into memory when it is freed.

const POISON_ALLOC_BYTE: u8 = 0xAD

Byte pattern to write into memory when it is allocated.

const WAKE_DENOMINATOR: u16 = 4

Denominator for the page-wake hysteresis.

const SEGMENT_POOL_WARM_THRESHOLD: usize = 0

Minimum warm segments kept in the pool after a purge_lazy call.

const GWP_SAMPLE_RATE: u32 = 0

Probabilistic guard-page sampling rate (GWP-ASan hook). 0 disables. Inspired by snmalloc 0.7.2 gwp_asan.h.

const MAX_ALLOC_SIZE_LIMIT: usize = 0

Maximum allocation size this policy will serve without a panic/error.

const POLICY_FINGERPRINT: u64 = _

Compile-time configuration fingerprint.

impl Clone for HardenedPolicy

fn clone(&self) -> HardenedPolicy

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Copy for HardenedPolicy

impl Debug for HardenedPolicy

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl Default for HardenedPolicy

fn default() -> HardenedPolicy

Returns the “default value” for a type.

impl Eq for HardenedPolicy

impl PartialEq for HardenedPolicy

fn eq(&self, other: &HardenedPolicy) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl PolicySlotSelection<CudaDeviceBackend> for HardenedPolicy

fn with_allocator<R>( f: impl FnOnce(&mut ThreadAllocator<CudaDeviceBackend>) -> R, ) -> Option<R>

Runs f with access to the allocator cache selected for this policy.

unsafe fn with_allocator_unguarded<R>( f: impl FnOnce(&mut ThreadAllocator<CudaDeviceBackend>) -> R, ) -> Option<R>

Runs f with access to the selected policy cache without arming the re-entrancy gate.

fn get_allocator_ptr() -> *mut c_void

Returns the initialized allocator pointer for this policy’s TLS slot.

fn get_allocator_ptr_raw() -> *mut c_void

Returns the raw allocator pointer for this policy’s TLS slot without forcing lazy initialization.

impl PolicySlotSelection<CudaGddrBackend> for HardenedPolicy

fn with_allocator<R>( f: impl FnOnce(&mut ThreadAllocator<CudaGddrBackend>) -> R, ) -> Option<R>

Runs f with access to the allocator cache selected for this policy.

unsafe fn with_allocator_unguarded<R>( f: impl FnOnce(&mut ThreadAllocator<CudaGddrBackend>) -> R, ) -> Option<R>

Runs f with access to the selected policy cache without arming the re-entrancy gate.

fn get_allocator_ptr() -> *mut c_void

Returns the initialized allocator pointer for this policy’s TLS slot.

fn get_allocator_ptr_raw() -> *mut c_void

Returns the raw allocator pointer for this policy’s TLS slot without forcing lazy initialization.

impl PolicySlotSelection<CudaHbmBackend> for HardenedPolicy

fn with_allocator<R>( f: impl FnOnce(&mut ThreadAllocator<CudaHbmBackend>) -> R, ) -> Option<R>

Runs f with access to the allocator cache selected for this policy.

unsafe fn with_allocator_unguarded<R>( f: impl FnOnce(&mut ThreadAllocator<CudaHbmBackend>) -> R, ) -> Option<R>

Runs f with access to the selected policy cache without arming the re-entrancy gate.

fn get_allocator_ptr() -> *mut c_void

Returns the initialized allocator pointer for this policy’s TLS slot.

fn get_allocator_ptr_raw() -> *mut c_void

Returns the raw allocator pointer for this policy’s TLS slot without forcing lazy initialization.

impl PolicySlotSelection<CudaHostPinnedBackend> for HardenedPolicy

fn with_allocator<R>( f: impl FnOnce(&mut ThreadAllocator<CudaHostPinnedBackend>) -> R, ) -> Option<R>

Runs f with access to the allocator cache selected for this policy.

unsafe fn with_allocator_unguarded<R>( f: impl FnOnce(&mut ThreadAllocator<CudaHostPinnedBackend>) -> R, ) -> Option<R>

Runs f with access to the selected policy cache without arming the re-entrancy gate.

fn get_allocator_ptr() -> *mut c_void

Returns the initialized allocator pointer for this policy’s TLS slot.

fn get_allocator_ptr_raw() -> *mut c_void

Returns the raw allocator pointer for this policy’s TLS slot without forcing lazy initialization.

impl PolicySlotSelection<CudaUnifiedBackend> for HardenedPolicy

fn with_allocator<R>( f: impl FnOnce(&mut ThreadAllocator<CudaUnifiedBackend>) -> R, ) -> Option<R>

Runs f with access to the allocator cache selected for this policy.

unsafe fn with_allocator_unguarded<R>( f: impl FnOnce(&mut ThreadAllocator<CudaUnifiedBackend>) -> R, ) -> Option<R>

Runs f with access to the selected policy cache without arming the re-entrancy gate.

fn get_allocator_ptr() -> *mut c_void

Returns the initialized allocator pointer for this policy’s TLS slot.

fn get_allocator_ptr_raw() -> *mut c_void

Returns the raw allocator pointer for this policy’s TLS slot without forcing lazy initialization.

impl PolicySlotSelection<MemoryBackendWrapper> for HardenedPolicy

fn with_allocator<R>( f: impl FnOnce(&mut ThreadAllocator<MemoryBackendWrapper>) -> R, ) -> Option<R>

Runs f with access to the allocator cache selected for this policy.

unsafe fn with_allocator_unguarded<R>( f: impl FnOnce(&mut ThreadAllocator<MemoryBackendWrapper>) -> R, ) -> Option<R>

Runs f with access to the selected policy cache without arming the re-entrancy gate.

fn get_allocator_ptr() -> *mut c_void

Returns the initialized allocator pointer for this policy’s TLS slot.

fn get_allocator_ptr_raw() -> *mut c_void

Returns the raw allocator pointer for this policy’s TLS slot without forcing lazy initialization.

impl StructuralPartialEq for HardenedPolicy