[SERVER-23570] Make SecureAllocator a real allocator Created: 06/Apr/16  Updated: 08/Jan/24  Resolved: 03/May/16

Status: Closed
Project: Core Server
Component/s: Security
Affects Version/s: None
Fix Version/s: 3.2.7, 3.3.5

Type: Improvement Priority: Major - P3
Reporter: Mira Carey Assignee: Mira Carey
Resolution: Done Votes: 1
Labels: code-and-test
Remaining Estimate: Not Specified
Time Spent: Not Specified
Original Estimate: Not Specified

Issue Links:
Depends
Related
related to SERVER-23705 Number of databases on Windows is lim... Closed
is related to DOCS-6885 Add "Locked Memory Pages" ulimit note Closed
Backwards Compatibility: Fully Compatible
Backport Completed:
Sprint: Platforms 13 (04/22/16), Platforms 14 (05/13/16)
Participants:
Linked BF Score: 0

 Description   

The secure allocator should be more like a real allocator. I.e. it shouldn't require a mmap or virtual alloc call for every allocation.

We would need to retain the constraints that:

  • Memory is zeroed after deallocate
  • Memory is always locked in memory

Lets:

  • Always ask the os for full pages of memory
    • hand out multiple allocations from the same page
    • refcount the pages and unlocking and returning after all consumers were gone


 Comments   
Comment by Githook User [ 10/May/16 ]

Author:

{u'username': u'hanumantmk', u'name': u'Jason Carey', u'email': u'jcarey@argv.me'}

Message: SERVER-23570 Make SecureAllocator a real allocator

Also adds SecureT, a wrapper proxy for newing objects on the secure heap.

(cherry picked from commit 6d7be60bbbf5a6be21c57398ab8616c4241b50a7)
Branch: v3.2
https://github.com/mongodb/mongo/commit/6b20d5cb585d2d6bfde8a5961e615eab0819b35a

Comment by Githook User [ 10/May/16 ]

Author:

{u'username': u'hanumantmk', u'name': u'Jason Carey', u'email': u'jcarey@argv.me'}

Message: SERVER-23570 Make SecureAllocator a real allocator

Enterprise changes required by the main repo SecureAllocator changes

(cherry picked from commit cbf6afe111567a61a3a8aeabe849ef90fe22aa1e)
Branch: v3.2
https://github.com/10gen/mongo-enterprise-modules/commit/428d8db2c0507ea4b6ed618d502d55199195d628

Comment by Githook User [ 19/Apr/16 ]

Author:

{u'username': u'hanumantmk', u'name': u'Jason Carey', u'email': u'jcarey@argv.me'}

Message: SERVER-23570 Make SecureAllocator a real allocator

Enterprise changes required by the main repo SecureAllocator changes
Branch: master
https://github.com/10gen/mongo-enterprise-modules/commit/cbf6afe111567a61a3a8aeabe849ef90fe22aa1e

Comment by Githook User [ 19/Apr/16 ]

Author:

{u'username': u'hanumantmk', u'name': u'Jason Carey', u'email': u'jcarey@argv.me'}

Message: SERVER-23570 Make SecureAllocator a real allocator

Also adds SecureT, a wrapper proxy for newing objects on the secure heap.
Branch: master
https://github.com/mongodb/mongo/commit/6d7be60bbbf5a6be21c57398ab8616c4241b50a7

Generated at Thu Feb 08 04:03:46 UTC 2024 using Jira 9.7.1#970001-sha1:2222b88b221c4928ef0de3161136cc90c8356a66.