Heap feng shui

In computer security, heap feng shui (also known as heap grooming[1]) is a technique used in exploits to facilitate arbitrary code execution.[2] The technique attempts to manipulate the layout of the heap by making heap allocations of carefully selected sizes. It is named after feng shui, an ancient Chinese system of aesthetics that involves the selection of precise alignments in space.

  1. ^ "What is a "good" memory corruption vulnerability?". Google Project Zero. June 26, 2015. Retrieved 2020-11-11.
  2. ^ "Heaps and Bounds". Trend Micro. September 3, 2007. Archived from the original on 2011-07-17. Retrieved 2009-08-10.