Meaningful Bounds Checking in the Linux Kernel

This talk traces Linux kernel heap buffer overflow flaws and examines why compilers sometimes fail to detect them. It explores kernel approaches to array, string, and memcpy bounds checking, including compiler options, flexible arrays, and FORTIFY_SOURCE.