Abstract: Embodiments are disclosed for managing heap metadata corruption. The techniques include detecting a metadata corruption error in a first heap disposed in a first region of memory. The techniques also include generating a second heap in a free memory region that is disposed beyond a break value address of a memory allocation system. The techniques further include updating a first entry for the first heap in a heap directory. Additionally, the techniques include generating a second entry for the second heap in the heap directory. The techniques also include processing a call to the memory allocation system for the first heap based on the first entry and the second entry.

Abstract: Threads of a multithreaded application may be scheduled to different cores and executed in various orders and at various frequencies. Controlling how the threads are scheduled and clock rates of processor cores enables testing multiple possible execution scenarios, which may force previously unknown timing window problems to occur. These timing window problems may then be detected.

Abstract: Embodiments include method, systems and computer program products for performing Spectre mitigation on a workload. The method includes starting, by at least one processor of a plurality of processors, a process. The at least one processor determines that the process is a kernel process. The at least one processor determines that an interrupt has occurred in response to the determination that the process is a kernel process. The at least one processor processes the interrupt in response to determining that an interrupt has occurred. The at least one processor suppresses a malware mitigation to be applied to the kernel process in response to interrupt being processed.

Abstract: Threads of a multithreaded application may be scheduled to different cores and executed in various orders and at various frequencies. Controlling how the threads are scheduled and clock rates of processor cores enables testing multiple possible execution scenarios, which may force previously unknown timing window problems to occur. These timing window problems may then be detected.

Abstract: Embodiments are disclosed for managing heap metadata corruption. The techniques include detecting a metadata corruption error in a first heap disposed in a first region of memory. The techniques also include generating a second heap in a free memory region that is disposed beyond a break value address of a memory allocation system. The techniques further include updating a first entry for the first heap in a heap directory. Additionally, the techniques include generating a second entry for the second heap in the heap directory. The techniques also include processing a call to the memory allocation system for the first heap based on the first entry and the second entry.

Abstract: Examples of techniques for deferred disclaim of memory pages are described herein. An aspect includes, based on freeing of a last allocation on a first memory page, placing, by a processor, the first memory page on a deferred disclaim list. Another aspect includes, based on freeing of the last allocation on the first memory page, setting, by the processor, a first hidden flag in a first page table entry corresponding to the first memory page.

Abstract: Examples of techniques for deferred disclaim of memory pages are described herein. An aspect includes, based on freeing of a last allocation on a first memory page, placing, by a processor, the first memory page on a deferred disclaim list.

Abstract: Embodiments include method, systems and computer program products for performing Spectre mitigation on a workload. The method includes starting, by at least one processor of a plurality of processors, a process. The at least one processor determines that the process is a kernel process. The at least one processor determines that an interrupt has occurred in response to the determination that the process is a kernel process. The at least one processor processes the interrupt in response to determining that an interrupt has occurred. The at least one processor suppresses a malware mitigation to be applied to the kernel process in response to interrupt being processed.

Abstract: A system includes a memory system and a processing system operably coupled to the memory system. The memory system includes a kernel address space associated with a kernel of an operating system and a user address space associated with a plurality of processes configured to interface with the kernel. The processing system is configured to perform a plurality of operations including determining that one or more new memory pages are assigned to the kernel address space. A kernel submodule of the kernel associated with the one or more new memory pages is identified. Clearing of the one or more new memory pages is skipped based on a memory initialization configuration associated with the kernel submodule. Access to the one or more new memory pages is provided.